CVE-2022-27237: Ni Flexlogger

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.

Affected products

• Ni Flexlogger: version 2021 only
• Ni G Web Development Software: version 2021 only
• Ni Labview: version 2021 only
• Ni Static Test Software Suite: before 1.2 (fixed in 1.2)
• Ni Systemlink: version 2020 only; version 2022 only

Published 2022-04-21. Last modified 2026-06-17.