Veritas: Security Vulnerabilities
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-05-20
InfoScale VIOM 9.1.3 allows XSS.
CVSS Score
5.4
EPSS Score
0.002
Published
2026-05-20
Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge.
CVSS Score
8.8
EPSS Score
0.002
Published
2026-05-20
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
CVSS Score
9.8
EPSS Score
0.009
Published
2024-11-24
Page 1