An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.

Microsoft Bug Bounty Program


Microsoft offers cash awards for finding and reporting certain types of vulnerabilities and exploitation techniques.

Listed: