Unrated severityNVD Advisory· Published Apr 5, 2023· Updated Feb 13, 2025

CVE-2023-26789

Description

Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Symantec/Netbackup Opscentercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 9.1.0.1

Patches

Vulnerability mechanics

References

github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS.txtmitre
github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS_CVE-2023-26789.txtmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000