CVE-2022-22965

CVE-2022-22965 (Spring4Shell) affects Spring Framework’s Spring MVC and Spring WebFlux when data binding is enabled in apps running on JDK 9+, with exploitation requiring Tomcat as WAR deployment. The issue is not exploited in Spring Boot executable jars. Vulnerable configurations are associated ...

CVE-2022-46411

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 8.0.0–8.0.100) are affected by a default-password issue that persists post-install, enabling potential privilege escalation if the credentials are discovered. The vulnerability is caused by retained default c...

CVE-2019-18780

CVE-2019-18780 is an arbitrary command-injection vulnerability in the Veritas InfoScale Cluster Server component. An unauthenticated remote attacker could execute arbitrary commands as root/administrator. Affected products include Veritas Access (7.4.2 and earlier), Access Appliance (7.4.2 and ea...

CVE-2022-46413

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 1.0–8.0.100) are affected by CVE-2022-46413, with authenticated remote command execution via the management portal. PT-Security details remediation: update Flex Scale to a version later than 3.0 and the Acces...

CVE-2022-46414

CVE-2022-46414 affects Veritas NetBackup Flex Scale up to 3.0 and NetBackup Access Appliance up to 8.0.100, permitting unauthenticated remote command execution via the management portal. CVSS v3.1 base score 9.8 (CRITICAL). Remediation: upgrade Veritas NetBackup Flex Scale to a version later than...