CVE-2023-26789: XSS
Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26789?
The severity of CVE-2023-26789 is medium (6.1).
How does Veritas NetBackUp OpsCenter Version 9.1.0.1 become vulnerable to Reflected Cross-site scripting (XSS)?
Veritas NetBackUp OpsCenter Version 9.1.0.1 becomes vulnerable to Reflected Cross-site scripting (XSS) due to its failure to adequately sanitize special characters.
What can an attacker do with the CVE-2023-26789 vulnerability?
By exploiting CVE-2023-26789, an attacker can execute arbitrary HTML and JavaScript code in a user's browser.
Is there a fix available for CVE-2023-26789?
Currently, there is no available fix for CVE-2023-26789. It is recommended to follow the vendor's security advisories and apply any patches or updates when they become available.
What is the Common Weakness Enumeration (CWE) for CVE-2023-26789?
The Common Weakness Enumeration (CWE) for CVE-2023-26789 is CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').