Known vulnerabilities in NetVault

Vendor: Quest Software Inc.
Software: NetVault
Software CPE: cpe:2.3:a:quest_software:netvault:*:*:*:*:*:*:*:*
Website: https://www.quest.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NetVault NetVault is affected by 10 known vulnerabilities: 8 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-7569		 CWE-79 Low
No
No
 14.0.2 26.06.2026 SB2026062563
#VU135323 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-9787		 CWE-78 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135322 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-9786		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135318 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-9785		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135302 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-9784		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135295 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-9783		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135287 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-9782		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135283 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-9781		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-9780		 CWE-79 Low
No
No
 14.0.2 25.06.2026 SB2026062563
#VU135214 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-7570		 CWE-89 Medium
No
No
 14.0.2 25.06.2026 SB2026062563