The vulnerability is an improper neutralization of script‑related HTML tags that allows a basic cross‑site scripting (XSS) flaw to be triggered through the Cohesity NetBackup Administration Console web interface. An attacker who can inject malicious script via vulnerable input can hijack user sessions, steal credentials, or perform actions on behalf of that user. The flaw is identified as CWE‑80.

The flaw affects Cohesity's NetBackup Administration Console web interface. Any deployment running a version earlier than 11.2 is susceptible. The vulnerability is limited to that web console component and does not directly affect the underlying storage or cluster services.

The CVSS score of 6.1 indicates moderate severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is over the web – an attacker needs to access the admin console through a browser or an application that can send crafted input. The absence of a known exploit reduces the current risk, but the basic XSS flaw could still be leveraged in phishing campaigns or by compromising an authenticated user account.