CVE-2021-41570: Veritas Netbackup
Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.
Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation.
Affected products
- Veritas Netbackup: from 8.2.0, before 9.0.0.1 (fixed in 9.0.0.1); version 9.1 only
Published 2022-04-19. Last modified 2026-06-17.