130 matches found
Veritas InfoScale VIOM SQL注入漏洞
Veritas InfoScale VIOM is an infrastructure monitoring and operations management platform for virtualized environments developed by Veritas Corporation in the United States. Versions of Veritas InfoScale VIOM prior to 9.1.3 contained a SQL injection vulnerability. This vulnerability stems from SQ...
CVE-2026-44923
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges...
CVE-2026-44926: Improper Access Control
InfoScale CmdServer before 7.4.2 mishandles access control...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
Veritas Technologies Infoscale Operations Manager 跨站请求伪造漏洞
Veritas Technologies Infoscale Operations Manager is a software developed by Veritas Technologies in the United States, used for managing the entire InfoScale deployment. This software offers features such as multi-cluster management, custom interfaces, and centralized audit logging. Version 9.1....
PT-2026-42194
Name of the Vulnerable Software and Affected Versions InfoScale VIOM versions prior to 9.1.3 Description An SQL injection allows remote attackers to escalate privileges. SQL injection is a type of flaw that allows an attacker to interfere with the queries that an application makes to its database...
CVE-2026-44923: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges...
CVE-2026-44923
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges...
CVE-2026-44926
Veritas InfoScale CmdServer versions prior to 7.4.2 are vulnerable to an access control flaw caused by the improper handling of access control processes. This vulnerability may allow unauthorized users to perform restricted actions within the environment. Remediation is available by updating Info...
PT-2026-42196
Name of the Vulnerable Software and Affected Versions InfoScale version 9.1.3 Operations Manager VIOM Description Cross-Site Request Forgery CSRF allows an attacker to trick a user with an active session into clicking a malicious HTML link. This action triggers unintended modifications within the...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
CVE-2026-44924
Veritas InfoScale VIOM version 9.1.3 is vulnerable to a Cross-Site Scripting (XSS) flaw. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. The impact of this vulnerability is characterized as having low confidentiality and low integrity impact...
CVE-2026-44925
Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...
CVE-2026-44925
Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...
CVE-2026-44925
A Cross-Site Request Forgery (CSRF) vulnerability exists in InfoScale v.9.1.3 Operations Manager (VIOM) . This flaw allows an attacker to trick a user with an active session into clicking a malicious HTML link, which can trigger unintended modifications on the VIOM web application without the use...
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS...
CVE-2022-26483
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting XSS vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP...
CVE-2022-26484
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via...
