CVE-2024-52944: XSS
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52944?
CVE-2024-52944 is classified as a medium severity vulnerability affecting Veritas Enterprise Vault.
How do I fix CVE-2024-52944?
To fix CVE-2024-52944, upgrade Veritas Enterprise Vault to version 15.1 UPD882911 or later.
Who is affected by CVE-2024-52944?
CVE-2024-52944 affects all users of Veritas Enterprise Vault versions prior to 15.1 UPD882911.
What type of attack does CVE-2024-52944 facilitate?
CVE-2024-52944 allows an authenticated remote attacker to perform Cross-Site Scripting (XSS) attacks.
Is authenticated access required for CVE-2024-52944 exploitation?
Yes, exploitation of CVE-2024-52944 requires authenticated access to the Veritas Enterprise Vault system.