PT-2025-33891 · Nutanix · Prism Central

Andrew Suters · Published 2025-08-20 · Updated 2025-08-20 · CVE-2024-12223

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions: Prism Central versions prior to 2024.3.1

Description: Prism Central is susceptible to a stored cross-site scripting attack through the Events component. This allows an attacker to hijack a victim user’s session and perform actions within that user’s security context.

Recommendations: Update Prism Central to version 2024.3.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-12223

Affected Products

Prism Central

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-12223 · Security Note
• https://twitter.com/CveFindCom/status/1957973330050347099 · Twitter Post
• https://t.me/CVEtracker/30421 · Telegram Post
• https://t.me/cveNotify/132851 · Telegram Post
• https://themissinglink.com.au/security-advisories/cve-2024-12223 · Note