Vulnerabilities > Veritas

DATE CVE VULNERABILITY TITLE RISK
2022-07-28 CVE-2022-36998 Out-of-bounds Write vulnerability in Veritas products
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).
network
low complexity
veritas CWE-787
6.5
2022-07-28 CVE-2022-36999 Unspecified vulnerability in Veritas products
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).
network
low complexity
veritas
6.5
2022-07-28 CVE-2022-37000 Unspecified vulnerability in Veritas products
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).
network
low complexity
veritas
6.5
2022-07-27 CVE-2022-36948 Cross-site Scripting vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, a DOM XSS attack can occur.
network
low complexity
veritas CWE-79
5.4
2022-07-27 CVE-2022-36949 Unspecified vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges.
local
low complexity
veritas
7.8
2022-07-27 CVE-2022-36950 Unspecified vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classloader manipulation.
network
low complexity
veritas
critical
9.8
2022-07-27 CVE-2022-36951 Unspecified vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability.
network
low complexity
veritas
critical
9.8
2022-07-27 CVE-2022-36952 Use of Hard-coded Credentials vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem.
network
low complexity
veritas CWE-798
critical
9.8
2022-07-27 CVE-2022-36953 Unspecified vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker to gain sensitive information.
network
low complexity
veritas
4.3
2022-07-27 CVE-2022-36954 Unspecified vulnerability in Veritas Netbackup
In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts.
network
low complexity
veritas
6.5