CVE-2024-47854 Information

Description

A vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated user without sanitization if executed by that user.

Reference

https://www.veritas.com/content/support/en_US/security/VTS24-010