CVE-2023-32569

An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410

High · published May 10, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The InfoScale VIOM web application is vulnerable to SQL Injection in some of the areas of the application. This allows attackers (who must have admin credentials) to submit arbitrary SQL commands on the back-end database to create, read, update, or delete any sensitive data stored in the database.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Published
2023-05-10T00:00Z
EPSS history
Timeline
  • 10 MAY 00:00Z
    An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410
    cvelistv5