CVE-2023-40535

Name of the Vulnerable Software and Affected Versions VI Web Client versions prior to 7.9.6

Description A stored cross-site scripting issue in the View setting page of VI Web Client allows a remote authenticated attacker to inject an arbitrary script.

Recommendations For versions prior to 7.9.6, update to version 7.9.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the View setting page until a patch is applied.