What is CVE-2023-26789?

CVE-2023-26789 is a medium-severity vulnerability in Veritas Netbackup Opscenter, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2023-04-05.

How severe is CVE-2023-26789?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Veritas Netbackup Opscenter

CVE-2023-26789

Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.005 (39.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Veritas Netbackup_opscenter — versions 9.1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Third Party Advisory)
cve@mitre.org (Broken Link)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2023-26789?: CVE-2023-26789 is a medium-severity vulnerability in Veritas Netbackup Opscenter, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2023-04-05.
How severe is CVE-2023-26789?: Medium severity. CVSS v3 base score is 6.1 out of 10.