PT-2025-16281 · Veritas +1 · Vault Enterprise +1

Name of the Vulnerable Software and Affected Versions: Arctera eDiscovery Platform versions prior to 10.3.2 Description: The issue concerns the Arctera eDiscovery Platform, where a cleartext password is placed on a command line in EVSearcher when the Enterprise Vault Collection Module is used...

CVE-2025-32987

CVE-2025-32987 affects Arctera eDiscovery Platform prior to version 10.3.2 when the Enterprise Vault Collection Module is used. The root cause is cleartext password exposure on the EVSearcher command line, enabling local disclosure of credentials via an attacker with limited local access. Public ...

CVE-2025-32987

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

Arctera eDiscovery Platform 安全漏洞

Arctera eDiscovery Platform is a complete integrated solution from Arctera that streamlines the electronic data presentation process across EDRM. A security vulnerability exists in Arctera eDiscovery Platform versions prior to 10.3.2, which stems from command line plaintext password storage...

CVE-2025-32987

Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...

CVE-2024-27283

A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed...

CVE-2024-27283

A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed...

Design/Logic Flaw

A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed...

CVE-2024-27283

A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed...

CVE-2024-27283

The CVE-2024-27283 issue affects Veritas eDiscovery Platform prior to 10.2.5, where an application administrator can upload potentially malicious files to arbitrary server locations. CVSS 3.1 base metrics indicate high impact (C/H, I/H, A/H) with network attack vector, low complexity, and high pr...

Veritas eDiscovery Platform Security Breach

Veritas eDiscovery Platform is a powerful engine from Veritas, Inc. for performing large-scale, dataset-driven searches to help organizations quickly identify critical parsed documents. A security vulnerability exists in Veritas eDiscovery Platform versions prior to 10.2.5, which stems from an...

CVE-2024-27283

A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed...

PT-2024-21791 · Veritas · Veritas Ediscovery Platform

Name of the Vulnerable Software and Affected Versions: Veritas eDiscovery Platform versions prior to 10.2.5 Description: A vulnerability was discovered that allows the application administrator to upload potentially malicious files to arbitrary locations on the server where the application is...

Microsoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI

The legal profession is known for being cautious or hesitant to adopt new technologies. However, when it comes to AI, it seems like legal professionals are ready to be on the leading edge of AI implementation. A Thomson Reuters survey of legal professionals found that 82% agree that AI can be...

Security Bulletin: Apache Struts Vulerability Affects IBM eDiscovery Manager (CVE-2023-34149, CVE-2023-34396)

Summary Multiple vulnerabilities in Apache Struts 2.5.30 may affect IBM eDiscovery Manager. Vulnerability Details CVEID:CVE-2023-34149 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by a flaw with only handling setProperty but not getProperty. By sending a specially craft...

Security Bulletin: Multiple Vulnerabilities in Apache Struts Affect IBM eDiscovery Manager

Summary Multiple vulnerabilities in Apache Struts 2.3.x may affect IBM eDiscovery Manager. These are addressed. Vulnerability Details CVEID:CVE-2020-17530 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by a forced double OGNL evaluation on...

Security Bulletin: Multiple Vulnerabilities in Apache Struts 1.2.x Affect IBM eDiscovery Manager

Summary Multiple vulnerabilities in Apache Struts 1.2.x may affect IBM eDiscovery Manager. Vulnerability Details CVEID:CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to protect against unintended remote...

MAAD-AF - MAAD Attack Framework - An Attack Tool For Simple, Fast And Effective Security Testing Of M365 And Azure AD

MAAD-AF is an open-source cloud attack tool developed for testing security of Microsoft 365 & Azure AD environments through adversary emulation. MAAD-AF provides security practitioners easy to use attack modules to exploit configurations across different M365/AzureAD cloud-based tools & services...

Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable xstream-1.4.17.jar

Summary Atlas eDiscovery Process Management is affected by a vulnerable xstream-1.4.17.jar. Hence xstream-1.4.17.jar upgraded to xstream-1.4.19.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2022-41966 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based...

Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable xmlbeans-2.3.0.jar

Summary Atlas eDiscovery Process Management is affected by a vulnerable xmlbeans-2.3.0.jar. Hence xmlbeans-2.3.0.jar upgraded to xmlbeans-3.0.0.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2021-23926 DESCRIPTION: Apache XMLBeans is vulnerable to a denial of service, caused by an XM...