Medium severity5.4NVD Advisory· Published Apr 19, 2022· Updated Jun 17, 2026

CVE-2021-41570

Description

Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation.

Affected products

Symantec/Netbackup2 versions
cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*range: >=8.2.0,<9.0.0.1
- cpe:2.3:a:veritas:netbackup:9.1:*:*:*:*:*:*:*
Symantec/NetBackup OpsCentercpe-rescue
Symantec/NetBackup OpsCenter Analyticsllm-create
Range: <9.1

Patches

Vulnerability mechanics

References

www.veritas.com/content/support/en_US/security/VTS22-007nvdVendor Advisory
www.veritas.com/support/en_US/securitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000