Veritas NetBackup 10.0

CPE Details

Veritas NetBackup 10.0
veritas
netbackup
10.0
2022-08-02
13h24 +00:00
2022-09-12
11h56 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:veritas:netbackup:10.0:*:*:*:*:*:*:*

Informations

Vendor

veritas

Product

netbackup

Version

10.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-45461 2022-11-16 23h00 +00:00 The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users (that have been explicitly added to the auth.conf file) to execute arbitrary commands as root.
8.8
Haute
CVE-2022-42299 2022-10-03 12h49 +00:00 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service.
7.5
Haute
CVE-2022-42300 2022-10-03 12h49 +00:00 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server nbars process can be crashed resulting in a denial of service. (Note: the watchdog service will automatically restart the process.)
6.5
Moyen
CVE-2022-42301 2022-10-03 12h49 +00:00 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process.
8.8
Haute
CVE-2022-42302 2022-10-03 12h49 +00:00 An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service.
9.8
Critique
CVE-2022-42303 2022-10-03 12h48 +00:00 An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302.
9.8
Critique
CVE-2022-42304 2022-10-03 12h48 +00:00 An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code.
9.8
Critique
CVE-2022-42305 2022-10-03 12h48 +00:00 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service.
7.5
Haute
CVE-2022-42307 2022-10-03 12h48 +00:00 An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.
9.8
Critique
CVE-2022-36996 2022-07-27 22h51 +00:00 An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server.
6.5
Moyen