CVE-2023-38404

8.8 highEPSS 0.9%

High (8.8) in veritas infoscale operations manager. EPSS 0.9% chance of exploitation in the next 30 days.

The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can then execute the malicious file to perform command execution on the remote server.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veritas:infoscale_operations_manager

References

https://www.veritas.com/content/support/en_US/security/VTS23-009
https://www.veritas.com/content/support/en_US/security/VTS23-009

Check your stack JSON