Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Veritas
  • Infoscale Operations Manager

No data.

No data.

References
Link Providers
https://supportinfoscale.cloud.com/support-home/kbsearch/article?articleNumber=1000766080&articleTitle=InfoScale_Operations_Manager_IOM_web_application_Security_Bulletin_for_CVE_2026_44923_CVE_2026_44924_and_CVE_2026_44925 cve-icon cve-icon
https://www.veritas.com/support/en_US/doc/120571566-166757640-0/viom_tot_v118836641-166757640 cve-icon cve-icon
History

Wed, 20 May 2026 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Veritas
Veritas infoscale Operations Manager
Vendors & Products Veritas
Veritas infoscale Operations Manager

Wed, 20 May 2026 17:45:00 +0000

Type Values Removed Values Added
Title InfoScale Operations Manager CSRF Vulnerability
Weaknesses CWE-352

Wed, 20 May 2026 16:45:00 +0000

Type Values Removed Values Added
Description Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-05-20T00:00:00.000Z

Updated: 2026-05-20T16:13:39.955Z

Reserved: 2026-05-08T00:00:00.000Z

Link: CVE-2026-44925

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-05-20T17:16:24.240

Modified: 2026-05-20T17:31:45.303

Link: CVE-2026-44925

cve-icon Redhat

No data.