This vulnerability involves improper neutralization of input during web page generation (CWE-79) in the Alerted Nodes Dashboard of Nozomi Networks Guardian. A malicious authenticated user with required privileges can inject HTML by editing a node label. When alerts for that node are displayed, the injected HTML may execute in the browser of users viewing the dashboard, enabling limited phishing or open redirect scenarios. Existing input validation and Content Security Policy prevent full XSS exploitation and direct data disclosure. The CVSS 4.0 vector indicates network attack vector, high attack complexity, low impact on confidentiality and integrity, and low scope impact. No patch or vendor advisory with remediation details is available at this time.

The impact is limited due to partial mitigations in place. A malicious privileged user can inject HTML that may render in other users' browsers, potentially enabling phishing or open redirect attacks. Full cross-site scripting exploitation and direct information disclosure are prevented by existing input validation and Content Security Policy. The CVSS score of 2.1 reflects the low severity and limited impact. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict privileges to trusted users to prevent unauthorized editing of node labels. Review and strengthen input validation and Content Security Policy configurations if possible. Monitor vendor communications for updates on patches or official mitigations.