This vulnerability is a reflected XSS (CWE-79) in Radware Alteon vADC version 34.5.4.0. It arises from improper neutralization of input during web page generation, enabling attackers to inject malicious scripts. The vulnerability is publicly disclosed but lacks a CVSS score and vendor-provided remediation details. It is not a cloud service, so remediation responsibility lies with the product user or vendor updates. No known active exploitation has been reported.

Successful exploitation could allow attackers to execute arbitrary scripts in the context of the affected web interface, potentially leading to unauthorized actions or data theft. However, no known exploits are currently reported, and the extent of impact depends on the deployment context and attacker capabilities.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor Radware advisories for updates and apply patches promptly once released.