Latest Veritas Vulnerabilities

● CVE-2023-40256
A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the...
Veritas NetBackup Snapshot Manager<=8.3.0.2
Veritas NetBackup Snapshot Manager=9.0
Veritas NetBackup Snapshot Manager=9.1
Veritas NetBackup Snapshot Manager=9.1.0.1
Veritas NetBackup Snapshot Manager=10.0
Veritas NetBackup Snapshot Manager=10.0.0.1
and 3 more
● CVE-2023-38404
The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can th...
Veritas InfoScale Operations Manager>=7.0.0<8.0.0.410
● CVE-2023-37237
In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.
Veritas NetBackup Appliance<4.1.0.1
Veritas NetBackup Appliance=4.1.0.1-maintenance_release1
Veritas NetBackup Appliance=4.1.0.1-maintenance_release2
● CVE-2023-32569
An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The InfoScale VIOM web application is vulnerable to SQL Injection in some of the areas o...
Veritas InfoScale Operations Manager<7.4.2.800
Veritas InfoScale Operations Manager>=8.0.0<8.0.410
● CVE-2023-32568
An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS comma...
Veritas InfoScale Operations Manager<7.4.2.800
Veritas InfoScale Operations Manager>=8.0.0<8.0.410
● CVE-2023-26788
Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header woul...
Veritas Netbackup Appliance Firmware=4.1.0.1
● CVE-2023-26789
Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is...
Veritas NetBackUp OpsCenter=9.1.0.1
● CVE-2023-28818
An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthen...
Veritas Aptare It Analytics<10.6.00
Veritas NetBackup IT Analytics=11.0.00
Veritas NetBackup IT Analytics=11.1.00
● CVE-2023-28759
An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileg...
Veritas NetBackup<10.0
● CVE-2023-28758
An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetB...
Veritas NetBackup<8.3.0.2
● CVE-2022-46414
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal.
Veritas Access Appliance<=8.0.100
Veritas Netbackup Flex Scale Appliance<=3.0
● CVE-2022-46412
An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands.
Veritas Netbackup Flex Scale Appliance<=3.0
● CVE-2022-46413
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command execution can occur via the management portal.
Veritas Access Appliance<=8.0.100
Veritas Netbackup Flex Scale Appliance<=3.0
● CVE-2022-46411
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate ...
Veritas Access Appliance<=8.0.100
Veritas Netbackup Flex Scale Appliance<=3.0
● CVE-2022-46410
An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root by using specific commands.
Veritas Netbackup Flex Scale Appliance<=3.0
● CVE-2022-42307
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the Disc...
Veritas NetBackup<=10.0.0.1
● CVE-2022-42308
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbx_exchange regis...
Veritas NetBackup<=8.2
● CVE-2022-42304
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code.
Veritas NetBackup<=10.0
● CVE-2022-42303
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT serv...
Veritas NetBackup<=10.0
● CVE-2022-42305
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service.
Veritas NetBackup<=10.0.0.1
● CVE-2022-42300
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server nbars process can be crashed resulting in a denial of service. (Note: the watch...
Veritas NetBackup<=10.0.0.1
● CVE-2022-42301
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbar...
Veritas NetBackup<=10.0.0.1
● CVE-2022-42299
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService servic...
Veritas NetBackup<=10.0.0.1
● CVE-2022-42302
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service.
Veritas NetBackup<=10.0
● CVE-2022-41319
A Reflected Cross-Site Scripting (XSS) vulnerability affects the Veritas Desktop Laptop Option (DLO) application login page (aka the DLOServer/restore/login.jsp URI). This affects versions before 9.8 ...
Veritas Desktop and Laptop Option>=9.1<9.8
● CVE-2022-41320
Veritas System Recovery (VSR) versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windo...
Veritas System Recovery>=18.0<18.0.4.57090
Veritas System Recovery>=21<21.0.3.62140
● CVE-2022-36995
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36994
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36998
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-37000
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions,...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36999
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions,...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36993
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36996
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access t...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 30 more
● CVE-2022-36997
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36986
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36990
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36984
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36989
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36992
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36991
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36988
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36985
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivil...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36987
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenti...
Veritas Flex Appliance=1.2
Veritas Flex Appliance=1.3
Veritas Flex Appliance=2.0
Veritas Flex Appliance=2.0.1
Veritas Flex Appliance=2.0.2
Veritas Flex Appliance=2.1
and 29 more
● CVE-2022-36956
In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key from the same domain. The affect...
Veritas NetBackup=9.0
Veritas NetBackup=9.1.0.0
● CVE-2022-36953
In Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker to gain sensitive information. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1...
Veritas NetBackup>=8.0<8.3.0.2
Veritas NetBackup=9.0
Veritas NetBackup=9.1.0.0
● CVE-2022-36955
In Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send specific commands to escalate their privileges. This affects 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2...
Veritas NetBackup>=8.0<=8.1.2
Veritas NetBackup>=8.3.0.0<=8.3.0.2
Veritas NetBackup=8.2
Veritas NetBackup=9.0
Veritas NetBackup=9.1.0.0
● CVE-2022-36954
In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0...
Veritas NetBackup>=8.0<8.3.0.2
Veritas NetBackup=9.0
Veritas NetBackup=9.1.0.0
● CVE-2022-36952
In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1...
Veritas NetBackup>=8.0<8.3.0.2
Veritas NetBackup=9.0
Veritas NetBackup=9.1.0.0
● CVE-2022-36948
In Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Veritas NetBackup>=8.0<8.3.0.2
Veritas NetBackup=9.0
Veritas NetBackup=9.0.0.1
Veritas NetBackup=9.1.0.0
● CVE-2022-36950
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classloader manipulation. This affects 8.x through 8.3.0.2, 9.x throug...
Veritas NetBackup>=8.0<8.3.0.2
Veritas NetBackup=9.0
Veritas NetBackup=9.1.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203