VYPR
← All advisories
High severity7.2NVD Advisory· Published Jul 17, 2023· Updated Jun 17, 2026

CVE-2023-38404

CVE-2023-38404

Description

The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can then execute the malicious file to perform command execution on the remote server.

Affected products

4
  • Symantec/InfoScale Operations Manager3 versions
    cpe:2.3:a:veritas:infoscale_operations_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:veritas:infoscale_operations_manager:*:*:*:*:*:*:*:*range: >=7.0.0,<8.0.0.410
    • (no CPE)
    • (no CPE)range: <8.0.0.410
  • Symantec/VIOMllm-create
    Range: <8.0.0.410

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.