CVE-2024-52941
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Nov 18, 2024
CWE ID 79
Summary
CVE-2024-52941 is a newly disclosed vulnerability affecting Veritas Enterprise Vault versions prior to 15.1 UPD882911. This issue, identified as ZDI-CAN-24695, enables an authenticated attacker to inject malicious parameters into HTTP requests when viewing archived content. The flaw exposes users to Cross-Site Scripting (XSS) attacks, potentially reflecting malicious code back to the user if executed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Enterprise Vault
Affected Vendors
- Veritas