Veritas

Records143All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical58CVSS 9.0–10.0

CVSS high51CVSS 7.0–8.9

Exploited now

Veritas records in CISA KEV

TI-2021-09221 Veritas Backup Exec Agent File Access Vulnerability CRITICAL 94KEV 2023-04-07 TI-2021-09222 Veritas Backup Exec Agent Improper Authentication Vulnerability CRITICAL 99KEV 2023-04-07 TI-2021-09223 Veritas Backup Exec Agent Command Execution Vulnerability CRITICAL 97KEV 2023-04-07 TI-2022-07142 Spring Framework JDK 9+ Remote Code Execution Vulnerability CRITICAL 100KEV 2022-04-04

Components

Products in the NVD configurations · select one to filter the records

Netbackup 66 records MEDIUM Netbackup Appliance 41 records CRITICAL Flex Appliance 19 records CRITICAL Enterprise Vault 17 records MEDIUM Flex Scale 17 records MEDIUM Infoscale Operations Manager 9 records MEDIUM Backup Exec 8 records CRITICAL Aptare 6 records MEDIUM

Records

6 records in Aptare · all components

TI-2020-16507 CVE-2020-27156 · GHSA-5qg3-f5jq-39vc

Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks.

MEDIUM 46

Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02184 Published 2020-10-15 No fix listed CWE-863

TI-2020-10237 CVE-2020-12874 · GHSA-fr85-fm4x-7g26

Veritas APTARE versions prior to 10.4 included code that bypassed the normal login…

MEDIUM 44

Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication credentials were provided to the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00903 Published 2020-05-14 No fix listed CWE-287

TI-2020-16508 CVE-2020-27157 · GHSA-xcc4-j2gc-c9xj

Veritas APTARE versions prior to 10.5 included code that bypassed the normal login…

LOW 37

Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to the server.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0098 Published 2020-10-15 No fix listed CWE-294

TI-2020-10240 CVE-2020-12877 · GHSA-fg3m-2j7h-hh89

Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication.

LOW 35

Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0123 Published 2020-05-14 No fix listed CWE-306

TI-2020-10239 CVE-2020-12876 · GHSA-5vvx-h4ff-cgq4

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended…

LOW 35

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01117 Published 2020-05-14 No fix listed CWE-863

TI-2020-10238 CVE-2020-12875 · GHSA-f5x3-w297-4r2h

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks.

LOW 29

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00642 Published 2020-05-14 No fix listed CWE-863

Open these records in search →

Critical	58
High	51
Medium	34
Low	0
No CVSS	0