CVE-2017-7352

Name of the Vulnerable Software and Affected Versions Pure Storage Purity version 4.7.5

Description A stored Cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via the host parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen.

Recommendations For Pure Storage Purity version 4.7.5, avoid using the host parameter in the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen until a fix is available. Consider restricting access to the SNMP Trap Manager configuration to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.