ZDI-CAN-24698: ZDI-24-1659: Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability
This vulnerability allows remote attackers to execute web requests with the target user's privileges on affected installations of Veritas Enterprise Vault. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2024-52944.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24698?
The severity of ZDI-CAN-24698 is considered significant due to its potential for remote code execution.
How do I fix ZDI-CAN-24698?
To fix ZDI-CAN-24698, update your Veritas Enterprise Vault installation to the latest version provided by the vendor.
What are the potential impacts of exploiting ZDI-CAN-24698?
Exploiting ZDI-CAN-24698 may allow attackers to perform actions on behalf of a legitimate user, leading to unauthorized access and data exposure.
Is user interaction required to exploit ZDI-CAN-24698?
Yes, user interaction is required as the target must visit a malicious page or open a malicious link to exploit ZDI-CAN-24698.
Which versions of Veritas Enterprise Vault are affected by ZDI-CAN-24698?
ZDI-CAN-24698 affects all installations of Veritas Enterprise Vault without proper patches or updates.