CVE-2024-47854

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitrary web script into an HTTP request that could reflect back to an authenticated user without sanitization if executed by that user.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Oct 4, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-478555.3util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.CVE-2024-478569.8In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or mor CVE-2024-478579.8SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH CVE-2024-47862.8An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device CVE-2024-478636.2An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, an CVE-2024-478645.3home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote CVE-2024-478655.3Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerab CVE-2024-478667.5Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-sourc CVE-2024-478677.5Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloade CVE-2024-478687.5Gradio is an open-source Python package designed for quick prototyping. This is a **data validation vulnerability** affecting several Gradio CVE-2024-478693.7Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **timing attack** in the way Gradio co CVE-2024-47875.8The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.7