Lucene search

[email protected]CVE-2023-32569

HistoryMay 10, 2023 - 5:15 a.m.

CVE-2023-32569

2023-05-1005:15:12

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

veritas

infoscale operations manager

viom

security vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

JSON

An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The InfoScale VIOM web application is vulnerable to SQL Injection in some of the areas of the application. This allows attackers (who must have admin credentials) to submit arbitrary SQL commands on the back-end database to create, read, update, or delete any sensitive data stored in the database.

Affected configurations

NVD

Node

veritasinfoscale_operations_managerRange<7.4.2.800

veritasinfoscale_operations_managerRange8.0.0–8.0.410

CPENameOperatorVersion
veritas:infoscale_operations_managerveritas infoscale operations managerlt7.4.2.800
veritas:infoscale_operations_managerveritas infoscale operations managerlt8.0.410

CPE	Name	Operator	Version
veritas:infoscale_operations_manager	veritas infoscale operations manager	lt	7.4.2.800
veritas:infoscale_operations_manager	veritas infoscale operations manager	lt	8.0.410

References

www.veritas.com/content/support/en_US/security/VTS23-007

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

JSON

Related for CVE-2023-32569

cvelist1 nvd1 prion1