Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation.
https://www.veritas.com/support/en_US/security
https://www.veritas.com/content/support/en_US/security/VTS22-007