126 matches found
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
PT-2026-42197
Name of the Vulnerable Software and Affected Versions InfoScale CmdServer versions prior to 7.4.2 Description InfoScale CmdServer mishandles access control, which may allow unauthorized users to perform restricted actions. Recommendations Update InfoScale CmdServer to version 7.4.2 or later...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
CVE-2026-44923: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges...
CVE-2026-44926
Veritas InfoScale CmdServer versions prior to 7.4.2 are vulnerable to an access control flaw caused by the improper handling of access control processes. This vulnerability may allow unauthorized users to perform restricted actions within the environment. Remediation is available by updating Info...
Veritas InfoScale CmdServer 访问控制错误漏洞
Veritas InfoScale CmdServer is a command execution and remote management service component provided by Veritas Corporation in the US, designed for InfoScale cluster environments. Versions of Veritas InfoScale CmdServer prior to 7.4.2 contained an access control vulnerability, which was caused by...
PT-2026-42195
Name of the Vulnerable Software and Affected Versions InfoScale VIOM version 9.1.3 Description Cross-site Scripting XSS is possible in the software. XSS is a type of security flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations At the...
CVE-2026-44925
A Cross-Site Request Forgery (CSRF) vulnerability exists in InfoScale v.9.1.3 Operations Manager (VIOM) . This flaw allows an attacker to trick a user with an active session into clicking a malicious HTML link, which can trigger unintended modifications on the VIOM web application without the use...
CVE-2026-44923
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges...
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS...
Veritas InfoScale VIOM SQL注入漏洞
Veritas InfoScale VIOM is an infrastructure monitoring and operations management platform for virtualized environments developed by Veritas Corporation in the United States. Versions of Veritas InfoScale VIOM prior to 9.1.3 contained a SQL injection vulnerability. This vulnerability stems from SQ...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
PT-2026-42194
Name of the Vulnerable Software and Affected Versions InfoScale VIOM versions prior to 9.1.3 Description An SQL injection allows remote attackers to escalate privileges. SQL injection is a type of flaw that allows an attacker to interfere with the queries that an application makes to its database...
CVE-2026-44925
Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...
CVE-2026-44923
A SQL injection vulnerability exists in Veritas InfoScale VIOM versions prior to 9.1.3 . This flaw occurs because the application fails to properly neutralize special elements in SQL commands, allowing remote attackers to interfere with database queries. Successful exploitation can lead to privil...
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS...
CVE-2026-44924
Veritas InfoScale VIOM version 9.1.3 is vulnerable to a Cross-Site Scripting (XSS) flaw. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. The impact of this vulnerability is characterized as having low confidentiality and low integrity impact...
CVE-2022-26483
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting XSS vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP...
CVE-2022-26484
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via...
