Symantec IT Analytics prior to 2.9.1 may be susceptible to a cross-site scripting (XSS) exploit which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users.