Reflected Cross-Site Scripting Vulnerability in Veritas NetBackUp OpsCenter

CVE-2023-26789

Summary

The Veritas NetBackUp OpsCenter Version 9.1.0.1 contains a vulnerability that allows for reflected cross-site scripting attacks. This vulnerability stems from the application’s insufficient sanitization of special characters, enabling an attacker to inject and execute arbitrary HTML and JavaScript code in the web browser of a user who interacts with the affected application. If exploited, this could lead to significant security risks, including data theft and unauthorized access to sensitive information.

References