CVE-2022-22965

CVE-2022-22965 (Spring4Shell) affects Spring Framework’s Spring MVC and Spring WebFlux when data binding is enabled in apps running on JDK 9+, with exploitation requiring Tomcat as WAR deployment. The issue is not exploited in Spring Boot executable jars. Vulnerable configurations are associated ...

CVE-2022-46411

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 8.0.0–8.0.100) are affected by a default-password issue that persists post-install, enabling potential privilege escalation if the credentials are discovered. The vulnerability is caused by retained default c...

CVE-2022-46414

CVE-2022-46414 affects Veritas NetBackup Flex Scale up to 3.0 and NetBackup Access Appliance up to 8.0.100, permitting unauthenticated remote command execution via the management portal. CVSS v3.1 base score 9.8 (CRITICAL). Remediation: upgrade Veritas NetBackup Flex Scale to a version later than...

CVE-2022-46413

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 1.0–8.0.100) are affected by CVE-2022-46413, with authenticated remote command execution via the management portal. PT-Security details remediation: update Flex Scale to a version later than 3.0 and the Acces...

CVE-2022-46410

CVE-2022-46410 affects Veritas NetBackup Flex Scale up to version 3.0. An attacker with non-root privileges can escalate to root by using specific commands. The available sources confirm a privilege-escalation vulnerability with high severity (CVSS v3.1: 8.8, HIGH) affecting the product, but do n...

CVE-2022-46412

CVE-2022-46412 affects Veritas NetBackup Flex Scale up to version 3.0. A non-privileged user can escape a restricted shell and execute privileged commands, enabling high-impact local privilege escalation. The available documents describe the vulnerability scenario and impact (CVE details, NVD/Red...