Opservices · Opservices Opmon · CVE-2021-43009
**Name of the Vulnerable Software and Affected Versions**
OpServices OpMon versions through 9.11
**Description**
A Cross Site Scripting (XSS) issue exists via the `search` parameter in the request URL.
**Recommendations**
For OpServices OpMon versions through 9.11, consider restricting access to the search functionality until a patch is available.
As a temporary workaround, avoid using the `search` parameter in the affected URL endpoint until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.