Newsletter Subject
Security Notification: Cross-site scripting (XSS) vulnerability in NI Web Server component
From
ni.com
Email Address
securitynotifications@direct.ni.com
Sent On
Fri, Apr 22, 2022 04:33 PM
Email Preheader Text
HTML
â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â â [View in web browser]( [Image](#) Dear Valued Customer, NI has discovered a vulnerability in a NI Web Server component that ships with multiple NI products. This component contains a reflected cross-site scripting (XSS) vulnerability that may allow attackers to execute arbitrary JavaScript code. Refer to the list below for affected products. This vulnerability is described in the security advisory for [CVE-2022-27237](. NI strongly recommends that you you review the information in this notification and take appropriate action. Affected Products - SystemLink 2020 R4 (20.6)
- SystemLink 2021 R1 (21.0)
- SystemLink 2021 R2 (21.1)
- FlexLogger 2021 R2
- FlexLogger 2021 R3
- FlexLogger 2021 R4
- LabVIEW 2021
- LabVIEW 2021 Community Edition
- G Web Development Software 2021
- Static Test Software Suite 1.1.0 For More Information Information included in this announcement is accurate to the extent of our knowledge at the time of publishing. For complete details and up-to-date information, refer to the full advisory at [ni.com/en-us/support/documentation/supplemental/22/cross-site-scripting-vulnerability--in-ni-web-server-component.html](. Best regards, NI Product Security Team To report vulnerabilities in National Instruments products, contact security@ni.com.
To download our PGP key, visit [ni.com/security](. You are receiving this message because you signed up for NI Security Notifications via our communications preferences page. If you wish, you may unsubscribe from them at [ni.com/myemail](. The information provided herein is provided âas isâ; NI makes no representations or warranties, whether express or implied, that the information is accurate, complete or up-to-date. [Image](#) [Update Profile]( [Contact Us]( [Manage Preferences]( Let's Connect [Legal]( | [Privacy]( © 2022 NATIONAL INSTRUMENTS CORP. ALL RIGHTS RESERVED. National Instruments, NI, ni.com, and NI CompactDAQ are trademarks of National Instruments Corporation.
- - - - - - - - - - - - - - - - - - - - - - -