CVE-2021-22410

Name of the Vulnerable Software and Affected Versions: iMaster NCE-Fabric version V100R019C10

Description: The issue is related to a XSS injection vulnerability. A module of the client does not verify the input sufficiently, allowing attackers to exploit this by modifying input after logging onto the client. This may compromise the normal service of the client.

Recommendations: For iMaster NCE-Fabric version V100R019C10, consider restricting access to the client until a patch is available, and ensure that all inputs are thoroughly verified to prevent exploitation. As a temporary workaround, consider disabling the vulnerable module until a fix is provided.