CVE-2022-23239: Netapp Active Iq Unified Manager

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.

Affected products

• Netapp Active Iq Unified Manager: before 9.11p1 (fixed in 9.11p1)

Published 2023-02-28. Last modified 2026-06-17.