CVE-2024-47854
An XSS vulnerability was discovered in Veritas Data Insight before 7.1
Medium · published October 4, 2024
What it is
An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated user without sanitization if executed by that user.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R
- CVSS v4.0
- Not supplied
- EPSS
- 0.00753 · 54.6th percentile
- Published
- 2024-10-04T00:00Z
EPSS history
Timeline