CVE-2019-14418: Veritas Resiliency Platform

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability allows a VRP user with sufficient privileges to overwrite any file in the VRP virtual machine. A malicious VRP user could use this to replace existing files to take control of the VRP virtual machine.

Affected products

• Veritas Resiliency Platform: version 1.2 only; version 2.0 only; version 2.1 only; version 2.2 only; version 3.0 only; version 3.1 only; …

Published 2019-07-29. Last modified 2026-06-17.