8.8High

CVE-2026-44925

veritas infoscale operations manager Published: (5 months ago)

Description

Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge.

Weakness (CWE): CWE-352

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
veritas infoscale operations manager < 9.1.3

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:veritas:infoscale_operations_manager:*:*:*:*:*:*:*:* < 9.1.3