CVE-2025-43704: Veritas Data Insight

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server.

Affected products

  • Veritas Data Insight: before 7.1.2 (fixed in 7.1.2)

Published 2025-04-16. Last modified 2026-06-17.