CVE-2024-52942
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Nov 18, 2024
CWE ID 79
Summary
CVE-2024-52942 is a newly disclosed vulnerability affecting Veritas Enterprise Vault versions before 15.1 UPD882911. This issue, identified as ZDI-CAN-24696, enables authenticated attackers to inject malicious parameters into HTTP requests. By doing so, they can carry out Cross-Site Scripting (XSS) attacks, potentially reflecting malicious code back to the user if executed. This poses a threat to users while they are viewing archived content.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Enterprise Vault
Affected Vendors
- Veritas