Browse CVEs

HIGH 8.8 CVE-2026-44925 Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active se… Infoscale Operations Manager 9.1.3+ Fix from $1,9502026-05-20 MEDIUM 6.5 CVE-2026-44923 SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges. Infoscale Operations Manager 9.1.3+ Fix from $1,6002026-05-20 MEDIUM 5.4 CVE-2026-44924 InfoScale VIOM 9.1.3 allows XSS. Infoscale Operations Manager 9.1.3+ Fix from $1,6002026-05-20 CRITICAL 9.8 CVE-2024-53911 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 CRITICAL 9.8 CVE-2024-53912 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 CRITICAL 9.8 CVE-2024-53913 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 CRITICAL 9.8 CVE-2024-53914 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 CRITICAL 9.8 CVE-2024-53915 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 CRITICAL 9.8 CVE-2024-53909 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 CRITICAL 9.8 CVE-2024-53910 An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code be… Enterprise Vault 15.2+ Fix from $2,3002024-11-24 HIGH 7.8 CVE-2024-52945 An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user … Netbackup 10.5+ Fix from $1,9502024-11-18 MEDIUM 5.4 CVE-2024-52944 An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a para… Enterprise Vault 15.1+ Fix from $1,6002024-11-18 MEDIUM 5.4 CVE-2024-52942 An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to inject a para… Enterprise Vault 15.1+ Fix from $1,6002024-11-18 MEDIUM 5.4 CVE-2024-52943 An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a para… Enterprise Vault 15.1+ Fix from $1,6002024-11-18 MEDIUM 6.1 CVE-2024-47854 An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP re… Data Insight 7.1+ Fix from $1,6002024-10-04 HIGH 7.8 CVE-2024-33673 An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search … Backup Exec 23.0+ Fix from $1,9502024-04-26 HIGH 7.1 CVE-2024-33671 An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leverag… Backup Exec 23.0+ Fix from $1,9502024-04-26 HIGH 7.1 CVE-2024-33672 An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file delet… Netbackup 10.4+ Fix from $1,9502024-04-26 CRITICAL 9.8 CVE-2024-28222 In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenti… Netbackup 3.1.2 / 8.1.2+ Fix from $2,3002024-03-07 HIGH 7.2 CVE-2024-27283 A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to … Ediscovery Platform 10.2.5+ Fix from $1,9502024-02-22 CRITICAL 9.8 CVE-2023-40256 A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ ser… Netbackup Snapshot Manager after 8.3.0.2 Fix from $2,3002023-08-11 HIGH 8.8 CVE-2023-38404 The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all types of fi… Infoscale Operations Manager 8.0.0.410+ Fix from $1,9502023-07-17 HIGH 7.2 CVE-2023-37237 In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arb… Netbackup Appliance 4.1.0.1+ Fix from $1,9502023-06-29 CRITICAL 9.8 CVE-2023-32569 An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The InfoScale VIOM web application is… Infoscale Operations Manager 7.4.2.800 / 8.0.410+ Fix from $2,3002023-05-10 HIGH 7.2 CVE-2023-32568 An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not val… Infoscale Operations Manager 7.4.2.800 / 8.0.410+ Fix from $1,9502023-05-10 MEDIUM 6.1 CVE-2023-26788 Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in u… Netbackup Appliance Firmware No fix yet Fix from $1,6002023-04-10 MEDIUM 6.1 CVE-2023-26789 Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special c… Netbackup Opscenter Mitigation only Fix from $1,6002023-04-05 MEDIUM 5.3 CVE-2023-28818 An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exp… Aptare It Analytics 10.6.00+ Fix from $1,6002023-03-24 HIGH 7.8 CVE-2023-28759 An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loadi… Netbackup 10.0+ Fix from $1,9502023-03-23 HIGH 7.1 CVE-2023-28758 An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup c… Netbackup 8.3.0.2+ Fix from $1,9502023-03-23