Medium WID-SEC-2024-3501 4 CVEs

Veritas Enterprise Vault: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Nov 19, 2024 · Updated Nov 19, 2024 · de-DE

Vendor: Veritas Product: Enterprise Vault Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Veritas Enterprise Vault ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Enterprise Vault ist eine Datenarchivierungssoftware.

Vulnerabilities 4

Medium 5.4

CVE-2024-52941

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated re…

Nov 18, 2024
Medium 5.4

CVE-2024-52942

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated re…

Nov 18, 2024
Medium 5.4

CVE-2024-52943

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated re…

Nov 18, 2024
Medium 5.4

CVE-2024-52944

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated re…

Nov 18, 2024

Revision history

2024-11-19 #1
Initiale Fassung

References

GitHub Advisory Database vom 2024-11-19
https://github.com/advisories/GHSA-236f-m6gm-vp93
Veritas Advisory Database vom 2024-11-19
https://www.veritas.com/support/en_US/security/VTS24-013