IthacaLabs/Veritas-Technologies

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-26788 ↗	Apr 10, 2023Monday, 10 April 2023, 13:15	6.1 MEDIUM	—
Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.
CVE-2023-26789 ↗	Apr 5, 2023Wednesday, 5 April 2023, 13:15	6.1 MEDIUM	—
Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.