CVEFinder.io

CVE-2023-32568

⚠️ high
🔍 Scan for this CVE
Summary

An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS commands and internal binaries used by the application. An attacker with root/administrator level privileges can leverage this to read sensitive data stored on the servers, modify data or server configuration, and delete data or application configuration.

CVSS Score
7.2
High
EPSS Score
0.3
Exploit Probability
Published Date
2023-05-10
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 55.5% of all 328,009 vulnerabilities in our database.

#145,998
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jan 28, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2025-01-28
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)

📦 Affected Products 2

🔗 References 1

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-44923 🔶 medium 6.5 0.0 SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges. 2026-05-20
CVE-2026-44924 🔶 medium 5.4 0.0 InfoScale VIOM 9.1.3 allows XSS. 2026-05-20
CVE-2026-44925 ⚠️ high 8.8 0.0 Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to for... 2026-05-20
CVE-2023-38404 ⚠️ high 7.2 0.1 The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attac... 2023-07-17
CVE-2023-32569 ⚠️ high 7.2 0.3 An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The Info... 2023-05-10
CVE-2022-26483 🔶 medium 4.8 0.2 An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch... 2022-03-04
These CVEs affect the same products