Symantec Netbackup Opscenter vulnerabilities

2 CVEs affecting Symantec Netbackup Opscenter, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6549, published 2015-10-06.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-1483, published 2015-03-06. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Symantec NetBackup OpsCenter 7.6.0.2 through 7.6.1 on Linux and UNIX allows remote attackers to execute arbitrary JavaScript code via unspecified vectors.
• CVE-2015-6549, published 2015-10-06. Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authenticated users to inject arbitrary web script or HTML…