Veritas Desktop And Laptop Option vulnerabilities

3 CVEs affecting Veritas Desktop And Laptop Option, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41319, published 2022-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-36159, published 2021-01-05. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication.
CVE-2020-36165, published 2021-01-06. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the…
CVE-2022-41319, published 2022-09-23. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A Reflected Cross-Site Scripting (XSS) vulnerability affects the Veritas Desktop Laptop Option (DLO) application login page (aka the DLOServer/restore/login.jsp URI). This affects versions before 9.8…