Veritas

Vulnerability activity for Veritas: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 3
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

8.8HighMar 1, 2021Veritas Backup Exec Agent Auth bypass / access controlCVE-2021-27878Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.Added to KEV Apr 7, 2023 · 766 days after publicationExploited24% likelyExploit codeMetasploit
8.2HighMar 1, 2021Veritas Backup Exec Agent Auth bypass / access controlCVE-2021-27877Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.Added to KEV Apr 7, 2023 · 766 days after publicationExploited65% likelyExploit codeMetasploit · NucleiDetection
8.1HighMar 1, 2021Veritas Backup Exec Agent Auth bypass / access controlCVE-2021-27876Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.Added to KEV Apr 7, 2023 · 766 days after publicationExploited14% likelyExploit codeMetasploit

Recent

8.8HighMay 20, 2026Veritas infoscale operations manager CSRFCVE-2026-44925Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge.
5.4MediumMay 20, 2026Veritas infoscale operations manager XSSCVE-2026-44924InfoScale VIOM 9.1.3 allows XSS.
6.5MediumMay 20, 2026Veritas infoscale operations manager SQL injectionCVE-2026-44923SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.
8.8HighMar 1, 2021Veritas Backup Exec Agent Auth bypass / access controlCVE-2021-27878Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.Exploited24% likelyExploit codeMetasploit
8.2HighMar 1, 2021Veritas Backup Exec Agent Auth bypass / access controlCVE-2021-27877Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.Exploited65% likelyExploit codeMetasploit · NucleiDetection
8.1HighMar 1, 2021Veritas Backup Exec Agent Auth bypass / access controlCVE-2021-27876Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.Exploited14% likelyExploit codeMetasploit

See every Veritas entry on the dashboard.