CVE-2013-3320

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions prior to 2.2

Description: The issue allows remote attackers to inject arbitrary web script or HTML via the full-name and comment fields, enabling Cross-site Scripting (XSS) attacks.

Recommendations: For versions prior to 2.2, update to version 2.2 or later to resolve the issue. As a temporary workaround, consider restricting input for the full-name and comment fields to minimize the risk of exploitation.