CVE-2019-18780

An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. These Veritas products are affected: Access 7.4.2 and earlier, Access Appliance 7.4.2 and earlier, Flex Appliance 1.2 and earlier, InfoScale 7.3.1 and earlier, InfoScale between 7.4.0 and 7.4.1, Veritas Cluster Server (VCS) 6.2.1 and earlier on Linux/UNIX, Veritas Cluster Server (VCS) 6.1 and earlier on Windows, Storage Foundation HA (SFHA) 6.2.1 and earlier on Linux/UNIX, and Storage Foundation HA (SFHA) 6.1 and earlier on Windows.

• CWE-77

• https://www.veritas.com/content/support/en_US/security/VTS19-003Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-004Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-005Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-006Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-003Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-004Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-005Patch, Vendor Advisory
• https://www.veritas.com/content/support/en_US/security/VTS19-006Patch, Vendor Advisory

Published

Nov 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18770Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-18771Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-18772Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-18773Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-18774Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1878A vulnerability in the Cisco Discovery Protocol (CDP) implem…7.5
• CVE-2019-18781An open redirect vulnerability was discovered in Zoho Manage…6.1
• CVE-2019-18782SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 …5.3
• CVE-2019-18784SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x version…9.8
• CVE-2019-18785SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 …7.5
• CVE-2019-18786In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is un…5.5
• CVE-2019-1879A vulnerability in the CLI of Cisco Integrated Management Co…6.4