This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Nozomi Networks Guardian. Specifically, an authenticated user with administrative privileges can insert malicious HTML tags into the Credentials Manager identities. When a victim user attempts to delete the affected identity, the malicious HTML is rendered in their browser, which can facilitate phishing and open redirect attacks. Existing input validation and Content Security Policy limit the impact by preventing full XSS exploitation and direct information disclosure. The vulnerability is rated medium severity with a CVSS 4.8 score. No patch or official remediation level has been published by Nozomi Networks as of the provided data.

The vulnerability allows an authenticated administrator to inject HTML that is rendered in other users' browsers during identity deletion, enabling phishing and open redirect attacks. However, the risk of full cross-site scripting exploitation and direct information disclosure is reduced due to existing input validation and Content Security Policy. There are no known exploits in the wild. The impact is limited to users who interact with the malicious identity deletion functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor Nozomi Networks advisories for updates. Until a patch is available, restrict administrative privileges to trusted users only and consider additional input validation or filtering on the Credentials Manager inputs if possible.