8.8High
CVE-2026-44925
Description
Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge.
Weakness (CWE):
CWE-352
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| veritas | infoscale operations manager | < 9.1.3 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:veritas:infoscale_operations_manager:*:*:*:*:*:*:*:*< 9.1.3