Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Nutanix Clear all filters
TI-2026-74875 CVE-2026-84731

Authentication bypass in Nutanix Prism Element allows admin access

Priority MEDIUM 51

An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01283 Published 2026-10-15 Fixed in 7.3.1.18, 7.5.2 +1 CWE-290
TI-2024-11337 CVE-2024-12223 · GHSA-qc9w-ffg5-hm26

Stored Cross-site Scripting (XSS) in Nutanix Prism Central

Priority MEDIUM 48

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security conte…

CVSS 4.0CRITICAL 9.3 Network No auth User interaction EPSS 0.00334 Published 2025-08-20 Fixed in 2024.3.1 CWE-79