CVE-2022-42303

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302...

CVE-2022-42303

Veritas NetBackup (through v10.0 and related Veritas products) is affected by a SQL Injection issue in the NBFSMCLIENT service. CVE-2022-42302 describes the vulnerability in the NetBackup Primary server; CVE-2022-42303 notes a second-order SQL Injection vector leveraging CVE-2022-42302. Red Hat e...

CVE-2022-42304

CVE-2022-42304 concerns Veritas NetBackup (Primary server) up to version 10.0 and related Veritas products. The issue is a SQL Injection affecting the idm, nbars, and SLP manager code. Root cause details across connected sources indicate the vulnerability resides in SQL injection pathways within ...

CVE-2022-42304

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code...

CVE-2022-42305

Veritas NetBackup through 10.0.0.1 is affected by a path traversal vulnerability in the DiscoveryService that could lead to sensitive data exposure. The issue affects NetBackup Primary servers prior to a version containing the fix; affected component is the DiscoveryService path handling. Impact ...

CVE-2022-42306

Summary: CVE-2022-42306 affects Veritas NetBackup (and related Veritas products) prior to 8.3. A local attacker can send a crafted packet to the pbx_exchange component during registration, triggering a NULL pointer dereference that crashes the pbx_exchange process (denial of service). Affected ve...

CVE-2022-42306

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbxexchange during registration and cause a NULL pointer exception, effectively crashing the pbxexchange process...

CVE-2022-42307

CVE-2022-42307 affects Veritas NetBackup 10.0.0.1 and earlier, where the NetBackup Primary server’s DiscoveryService is vulnerable to XML External Entity (XXE) Injection. An attacker can exploit the flaw via crafted XML to potentially read local files, with the NVD entry citing high impact across...

CVE-2022-42308

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbxexchange registration code...

CVE-2022-42308

CVE-2022-42308 affects Veritas NetBackup (and related Veritas products) prior to 8.3. A path traversal in the pbx_exchange registration code allows a local attacker to delete arbitrary files. Impact: local access required; integrity and availability impact reported as high; confidentiality not af...

Veritas NetBackup 路径遍历漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A path traversal...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A security vulnerabili...

Veritas NetBackup 代码问题漏洞

Veritas NetBackup is a storage service used by Veritas, Inc. to provide backup and recovery capabilities for enterprise environments. Veritas NetBackup 10.0.0.1 and previous versions are vulnerable to XML external entity injection, which stems from the fact that the DiscoveryService service does...

PT-2022-26363 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 8.3 Description: An issue was discovered that allows an attacker with local access to delete arbitrary files by leveraging a path traversal in the pbx exchange registration code. Recommendations: For Verita...

CVE-2022-42299: Undefined Security Weakness

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service...

PT-2022-26355 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Veritas related products affected versions not specified Description: An issue was discovered that can cause the NetBackup Primary server nbars process to crash, resulting in a denial of service. T...

PT-2022-26361 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 8.3 Description: An issue was discovered that allows an attacker with local access to send a crafted packet to pbx exchange during registration, causing a NULL pointer exception and effectively crashing the...

PT-2022-26356 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Description: An issue was discovered that makes the NetBackup Primary server vulnerable to an XML External Entity XXE injection attack through the nbars process. Recommendations: For versions prior...

PT-2022-26360 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Veritas products affected versions not specified Description: An issue was discovered that makes the NetBackup Primary server vulnerable to a Path traversal attack through the DiscoveryService...

CVE-2022-42302: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service...