CVE-2015-6549: Symantec Netbackup Opscenter

Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Symantec Netbackup Opscenter: up to and including 7.7.0

Published 2015-10-06. Last modified 2026-06-17.