CVE-2021-41570

Name of the Vulnerable Software and Affected Versions Veritas NetBackup OpsCenter Analytics version 9.1

Description The issue allows for XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation.

Recommendations For Veritas NetBackup OpsCenter Analytics version 9.1, consider restricting access to the vulnerable fields until a patch is available. As a temporary workaround, avoid using the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password fields in the Settings/Configuration Add operation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.