Vulnerabilities

Filters

2 selected

41 records

Sort

Vendor: Veritas Component: Netbackup Appliance Clear all filters

TI-2024-18784 CVE-2024-28222 · GHSA-cmx8-2m2f-ggxf

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process…

MEDIUM 44

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2024-03-07 No fix listed CWE-22

TI-2023-18867 CVE-2023-37237 · GHSA-h4ch-2gpx-6992

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an…

LOW 35

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00624 Published 2023-06-29 No fix listed CWE-732

TI-2022-17189 CVE-2022-36984 · GHSA-326q-wqm4-vqpx

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 35

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00758 Published 2022-07-28 No fix listed

TI-2022-17190 CVE-2022-36985 · GHSA-h43v-vpxv-q99h

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 33

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00203 Published 2022-07-28 No fix listed

TI-2022-17191 CVE-2022-36986 · GHSA-5whp-jf8x-g2hr

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 44

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00982 Published 2022-07-28 No fix listed

TI-2022-17192 CVE-2022-36987 · GHSA-pf98-8c89-mcc9

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 38

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00648 Published 2022-07-28 No fix listed

TI-2022-17193 CVE-2022-36988 · GHSA-jjjg-hhr8-vq58

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 40

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00912 Published 2022-07-28 No fix listed

TI-2022-17194 CVE-2022-36989 · GHSA-xvmj-5r56-cxhq

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 40

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01076 Published 2022-07-28 No fix listed

TI-2022-17195 CVE-2022-36990 · GHSA-mfcj-j477-37vw

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 42

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00679 Published 2022-07-28 No fix listed

TI-2022-17196 CVE-2022-36991 · GHSA-f3q6-gphh-82w4

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 36

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00679 Published 2022-07-28 No fix listed

TI-2022-17197 CVE-2022-36992 · GHSA-x844-82pm-fvg4

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 45

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01076 Published 2022-07-28 No fix listed

TI-2022-17198 CVE-2022-36993 · GHSA-pc4q-m4g5-r3ww

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

MEDIUM 40

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01076 Published 2022-07-28 No fix listed

TI-2022-17199 CVE-2022-36994 · GHSA-w677-wh7m-64w6

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 30

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0063 Published 2022-07-28 No fix listed

TI-2022-17200 CVE-2022-36995 · GHSA-hr7m-fh2x-63ff

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 21

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00521 Published 2022-07-28 No fix listed

TI-2022-17201 CVE-2022-36996 · GHSA-rj7q-6f7f-6cfq

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 30

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00622 Published 2022-07-28 No fix listed

TI-2022-17202 CVE-2022-36997 · GHSA-5gp3-x26c-6x2j

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 39

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00721 Published 2022-07-28 No fix listed CWE-918

TI-2022-17203 CVE-2022-36998 · GHSA-hwvv-rhv5-x8gf

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 30

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00678 Published 2022-07-28 No fix listed CWE-787

TI-2022-17204 CVE-2022-36999 · GHSA-xgwh-9xmj-ghm4

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 30

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00714 Published 2022-07-28 No fix listed

TI-2022-17205 CVE-2022-37000 · GHSA-v8r7-356r-q2mq

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through…

LOW 30

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00714 Published 2022-07-28 No fix listed

TI-2022-07142 CVE-2022-22965 · GHSA-36p3-wjmg-h94x

Code injection in Spring Framework

CRITICAL 100KEV

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99638 Published 2022-04-01 Partial fix · 5.2.20.RELEASE, 5.3.18 +2 CWE-94

TI-2019-07249 CVE-2019-9868 · GHSA-wxcg-xw6q-j8m7

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2.

LOW 34

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.0124 Published 2019-03-19 No fix listed CWE-522

TI-2019-07248 CVE-2019-9867 · GHSA-5vx8-83mx-4p57

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2.

LOW 34

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.0118 Published 2019-03-19 No fix listed CWE-522

TI-2018-13187 CVE-2018-18652 · GHSA-78wx-v5xq-93gg

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2…

LOW 38

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04074 Published 2018-10-25 No fix listed

TI-2017-06367 CVE-2017-8859 · GHSA-jhjc-gw7c-rh3x

In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.

MEDIUM 47

In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02556 Published 2017-05-09 No fix listed

TI-2017-06366 CVE-2017-8858 · GHSA-g38h-7c22-gj8g

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is…

MEDIUM 47

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02698 Published 2017-05-09 No fix listed CWE-732