Veritas Resiliency Platform vulnerabilities

5 CVEs affecting Veritas Resiliency Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-36168, published 2021-01-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-14416, published 2019-07-29. High severity, CVSS 7.2. EPSS: 4.5% chance of exploitation in the next 30 days. An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execute commands with root privilege within…
CVE-2019-14418, published 2019-07-29. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability allows a VRP user with sufficient privileges to…
CVE-2019-14417, published 2019-07-29. High severity, CVSS 7.2. EPSS: 4% chance of exploitation in the next 30 days. An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execute commands with root privilege within…
CVE-2019-14415, published 2019-07-29. Medium severity, CVSS 4.8. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a malicious VRP user to inject malicious script into another…
CVE-2020-36168, published 2021-01-06. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library…