CVE-2024-52941: XSS
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52941?
CVE-2024-52941 is classified as a moderate severity vulnerability due to its potential for Cross-Site Scripting attacks.
How does CVE-2024-52941 affect Veritas Enterprise Vault?
CVE-2024-52941 allows an authenticated remote attacker to inject a parameter into an HTTP request, potentially reflecting malicious content to an authenticated user.
How do I fix CVE-2024-52941?
To mitigate CVE-2024-52941, upgrade Veritas Enterprise Vault to version 15.1 UPD882911 or later.
Who is impacted by CVE-2024-52941?
Any organization using Veritas Enterprise Vault versions prior to 15.1 UPD882911 is at risk of CVE-2024-52941.
What type of attack does CVE-2024-52941 enable?
CVE-2024-52941 enables Cross-Site Scripting (XSS) attacks against authenticated users viewing archived content.