CVE-2019-14415

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a malicious VRP user to inject malicious script into another user's browser, related to resiliency plans functionality. A victim must open a resiliency plan that an attacker has access to.

• CWE-79

• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jul/39Broken Link, Mailing List, Third Party Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue4Vendor Advisory
• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jul/39Broken Link, Mailing List, Third Party Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue4Vendor Advisory

Published

Jul 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1441A remote code execution vulnerability exists when the Window…8.8
• CVE-2019-14410Maketext in cPanel before 78.0.2 allows format-string inject…
• CVE-2019-14411cPanel before 78.0.2 does not properly restrict demo account…
• CVE-2019-14412Maketext in cPanel before 78.0.2 allows format-string inject…
• CVE-2019-14413cPanel before 78.0.2 allows certain file-write operations as…
• CVE-2019-14414In cPanel before 78.0.2, a Userdata cache temporary file can…
• CVE-2019-14416An issue was discovered in Veritas Resiliency Platform (VRP)…7.2
• CVE-2019-14417An issue was discovered in Veritas Resiliency Platform (VRP)…7.2
• CVE-2019-14418An issue was discovered in Veritas Resiliency Platform (VRP)…8.8
• CVE-2019-1442A security feature bypass vulnerability exists when Microsof…5.5
• CVE-2019-14422An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncm…
• CVE-2019-14423A Remote Code Execution (RCE) issue in the addon CUx-Daemon …8.8