← CVE Intelligence

CVE-2021-37216

QSAN Storage Manager - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

QSAN Storage Manager header page parameters does not filter special characters. Remote attackers can inject JavaScript without logging in and launch reflected XSS attacks to access and modify specific data.

Affected (CNA)

Vendor / productVersions
QSAN / Storage Manager XN8008Taffected unspecified through 3.3.2
QSAN / Storage Manager XN8024Raffected unspecified through 3.1.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.