Priority LOW 39
Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended mo…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00198 · Published 2026-05-20 · No fix listed CWE-352
Priority LOW 24
InfoScale VIOM 9.1.3 allows XSS.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00208 · Published 2026-05-20 · No fix listed CWE-79
Priority LOW 35
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00309 · Published 2026-05-20 · No fix listed CWE-89
Priority HIGH 72
Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00166 · Published 2026-02-01 · No fix listed CWE-428
Priority LOW 21
Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server.
CVSS 3.1MEDIUM 4.7· Adjacent network · No auth · No interaction · EPSS 0.0014 · Published 2025-04-16 · Fixed in 7.1.2 CWE-319
Priority LOW 32
Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00586 · Published 2024-12-30 · Fixed in 7.1.1 CWE-89
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority MEDIUM 51
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2024-11-24 · No fix listed CWE-502
Priority LOW 35
An issue was discovered in Veritas NetBackup before 10.5.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00228 · Published 2024-11-18 · No fix listed CWE-94
Priority LOW 25
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00373 · Published 2024-11-18 · No fix listed CWE-79
Priority LOW 27
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01171 · Published 2024-11-18 · No fix listed CWE-79
Priority LOW 25
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00373 · Published 2024-11-18 · No fix listed CWE-79
Priority LOW 29
An XSS vulnerability was discovered in Veritas Data Insight before 7.1.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00753 · Published 2024-10-04 · No fix listed CWE-79
Priority LOW 35
An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00156 · Published 2024-04-26 · No fix listed CWE-284
Priority LOW 33
An issue was discovered in Veritas NetBackup before 10.4.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00168 · Published 2024-04-26 · No fix listed CWE-427
Priority LOW 35
An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00167 · Published 2024-04-26 · No fix listed CWE-73
Priority MEDIUM 44
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00989 · Published 2024-03-07 · No fix listed CWE-22
Priority LOW 35
A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00678 · Published 2024-02-22 · No fix listed CWE-434
Priority MEDIUM 43
A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00399 · Published 2023-08-11 · No fix listed CWE-295
Priority MEDIUM 42
The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all types of files to the server.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00897 · Published 2023-07-17 · No fix listed CWE-434
Load more
THREATIST.IORead the docs