Veritas

Records143All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical58CVSS 9.0–10.0

CVSS high51CVSS 7.0–8.9

Exploited now

Veritas records in CISA KEV

TI-2021-09221 Veritas Backup Exec Agent File Access Vulnerability CRITICAL 94KEV 2023-04-07 TI-2021-09222 Veritas Backup Exec Agent Improper Authentication Vulnerability CRITICAL 99KEV 2023-04-07 TI-2021-09223 Veritas Backup Exec Agent Command Execution Vulnerability CRITICAL 97KEV 2023-04-07 TI-2022-07142 Spring Framework JDK 9+ Remote Code Execution Vulnerability CRITICAL 100KEV 2022-04-04

Components

Products in the NVD configurations · select one to filter the records

Netbackup 66 records MEDIUM Netbackup Appliance 41 records CRITICAL Flex Appliance 19 records CRITICAL Enterprise Vault 17 records MEDIUM Flex Scale 17 records MEDIUM Infoscale Operations Manager 9 records MEDIUM Backup Exec 8 records CRITICAL Aptare 6 records MEDIUM

Records

41 records in Netbackup Appliance · all components

TI-2022-07142 CVE-2022-22965 · GHSA-36p3-wjmg-h94x

Code injection in Spring Framework

CRITICAL 100KEV

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99638 Published 2022-04-01 Partial fix · 5.2.20.RELEASE, 5.3.18 +2 CWE-94

TI-2017-04210 CVE-2017-6403 · GHSA-ppvq-g8j8-6888

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before…

MEDIUM 64

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.26677 Published 2017-03-02 No fix listed CWE-798

TI-2017-06365 CVE-2017-8857 · GHSA-x7f8-ch8h-367m

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is…

MEDIUM 51

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05674 Published 2017-05-09 No fix listed CWE-732

TI-2017-06364 CVE-2017-8856 · GHSA-pm7g-58rq-f94w

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is…

MEDIUM 49

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03806 Published 2017-05-09 No fix listed CWE-732

TI-2017-06367 CVE-2017-8859 · GHSA-jhjc-gw7c-rh3x

In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.

MEDIUM 47

In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02556 Published 2017-05-09 No fix listed

TI-2017-06366 CVE-2017-8858 · GHSA-g38h-7c22-gj8g

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is…

MEDIUM 47

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02698 Published 2017-05-09 No fix listed CWE-732

TI-2015-05499 CVE-2015-6550 · GHSA-jr78-c2rr-w8xc

bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through…

MEDIUM 47

bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x b…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02822 Published 2016-05-07 No fix listed CWE-284

TI-2015-05501 CVE-2015-6552 · GHSA-m5r2-rqw4-gmqx

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7…

MEDIUM 46

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2016-05-07 No fix listed CWE-284

TI-2022-17197 CVE-2022-36992 · GHSA-x844-82pm-fvg4

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 45

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01076 Published 2022-07-28 No fix listed

TI-2017-04216 CVE-2017-6409 · GHSA-frmg-g5w8-7h53

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0…

MEDIUM 45

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01362 Published 2017-03-02 No fix listed CWE-306

TI-2024-18784 CVE-2024-28222 · GHSA-cmx8-2m2f-ggxf

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process…

MEDIUM 44

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2024-03-07 No fix listed CWE-22

TI-2022-17191 CVE-2022-36986 · GHSA-5whp-jf8x-g2hr

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 44

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00982 Published 2022-07-28 No fix listed

TI-2022-17195 CVE-2022-36990 · GHSA-mfcj-j477-37vw

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 42

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00679 Published 2022-07-28 No fix listed

TI-2022-17198 CVE-2022-36993 · GHSA-pc4q-m4g5-r3ww

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 40

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01076 Published 2022-07-28 No fix listed

TI-2022-17194 CVE-2022-36989 · GHSA-xvmj-5r56-cxhq

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 40

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01076 Published 2022-07-28 No fix listed

TI-2022-17193 CVE-2022-36988 · GHSA-jjjg-hhr8-vq58

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 40

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00912 Published 2022-07-28 No fix listed

TI-2017-04214 CVE-2017-6407 · GHSA-fvcf-j93x-p865

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before…

MEDIUM 40

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.01024 Published 2017-03-02 No fix listed

TI-2017-04206 CVE-2017-6399 · GHSA-gj46-229p-65mj

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before…

MEDIUM 40

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.01 Published 2017-03-02 No fix listed

TI-2022-17202 CVE-2022-36997 · GHSA-5gp3-x26c-6x2j

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 39

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00721 Published 2022-07-28 No fix listed CWE-918

TI-2022-17192 CVE-2022-36987 · GHSA-pf98-8c89-mcc9

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 38

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00648 Published 2022-07-28 No fix listed

TI-2018-13187 CVE-2018-18652 · GHSA-78wx-v5xq-93gg

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2…

LOW 38

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04074 Published 2018-10-25 No fix listed

TI-2017-04213 CVE-2017-6406 · GHSA-2mv9-hw87-r9p2

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before…

LOW 38

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00444 Published 2017-03-02 No fix listed

TI-2017-04207 CVE-2017-6400 · GHSA-52pm-pj25-5mfx

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before…

LOW 38

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.

CVSS 3.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00444 Published 2017-03-02 No fix listed

TI-2022-17196 CVE-2022-36991 · GHSA-f3q6-gphh-82w4

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 36

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00679 Published 2022-07-28 No fix listed

TI-2023-18867 CVE-2023-37237 · GHSA-h4ch-2gpx-6992

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an…

LOW 35

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00624 Published 2023-06-29 No fix listed CWE-732

Open these records in search →