CVE-2024-12223: Nutanix Prism Central

Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context.

Affected products

• Nutanix Prism Central: before 2024.3.1 (fixed in 2024.3.1)

Published 2025-08-20. Last modified 2026-06-17.