Volerion logoVolerion
Volerion logoVolerion

Veritas InfoScale Operations Manager Cross-Site Request Forgery Vulnerability

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in Veritas InfoScale Operations Manager (VIOM) version 9.1.3. This vulnerability allows an attacker to manipulate users with active sessions into clicking on a malicious HTML link. Such an action would inadvertently cause unauthorized changes within the VIOM web application, all without the user's awareness.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user, potentially allowing for unwanted changes or modifications within the InfoScale Operations Manager web application.

Remediation

Users are advised to upgrade to Veritas InfoScale Operations Manager version 9.1.3 or later. Instructions for upgrading managed hosts to version 9.0 are available in the Veritas InfoScale Operations Manager 9.0 Installation and Configuration Guide.

Added: May 20, 2026, 5:21 PM
Updated: May 20, 2026, 5:21 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
0.6
exploitability
5.4
remediation
7.7
relevance
8.9
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.