CVE-2021-41570

{"id": "CVE-2021-41570", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-04-19T13:15:07.980", "references": [{"url": "https://www.veritas.com/content/support/en_US/security/VTS22-007", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.veritas.com/support/en_US/security", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.veritas.com/content/support/en_US/security/VTS22-007", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.veritas.com/support/en_US/security", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation."}, {"lang": "es", "value": "Veritas NetBackup OpsCenter Analytics versi\u00f3n 9.1, permite un uso de tipo XSS por medio de los campos NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password durante una operaci\u00f3n de A\u00f1adir Ajustes/Configuraci\u00f3n"}], "lastModified": "2024-11-21T06:26:27.017", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C93B41BD-3F05-4130-BDDE-14A2E0B08B90", "versionEndExcluding": "9.0.0.1", "versionStartIncluding": "8.2.0"}, {"criteria": "cpe:2.3:a:veritas:netbackup:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8797A64D-D4EA-45F4-911E-3F5794979FBB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}