CVEvulnerability

CVE-2025-26514

6.4 MEDIUM Published 2025-09-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-09-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Weaknesses
CWE-79

Description

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modify user accounts but requires the attacker to know specific information about the target instance and then trick a privileged user into clicking a specially crafted link.

Affected configurations

• netapp storagegrid (< 11.8.0.15) • netapp storagegrid (>= 11.9.0 < 11.9.0.8)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References