Veritas Data Insight vulnerabilities

3 CVEs affecting Veritas Data Insight, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-43704, published 2025-04-16.

More from Veritas.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-47854, published 2024-10-04. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated…
• CVE-2024-46542, published 2024-12-30. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks.
• CVE-2025-43704, published 2025-04-16. Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days. Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OneFS server.