CVSS: 8.8EPSS: 0%CPEs: 35EXPL: 0CVE-2022-36993
https://notcve.org/view.php?id=CVE-2022-36993
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server. Se ha detectado un problema en Veritas NetBackup versiones 8.1.x hasta 8.1.2, 8.2, 8.3.x hasta 8.3.0.2, 9.x hasta 9.0.0.1 y 9.1.x hasta 9.1.0.1 (y productos NetBackup relacionados). Un atacante con acceso autenticado a un cliente de NetBackup podría ejecutar remotamente comandos arbitrarios en un servidor primario de NetBackup • https://www.veritas.com/content/support/en_US/security/VTS22-004#h1 •
CVSS: 6.5EPSS: 0%CPEs: 35EXPL: 0CVE-2022-36994
https://notcve.org/view.php?id=CVE-2022-36994
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server. Se ha detectado un problema en Veritas NetBackup versiones 8.1.x hasta 8.1.2, 8.2, 8.3.x hasta 8.3.0.2, 9.x hasta 9.0.0.1 y 9.1.x hasta 9.1.0.1 (y productos NetBackup relacionados). Un atacante con acceso autenticado a un cliente de NetBackup podría leer arbitrariamente archivos de un servidor primario de NetBackup • https://www.veritas.com/content/support/en_US/security/VTS22-004#m4 •
CVSS: 4.3EPSS: 0%CPEs: 35EXPL: 0CVE-2022-36995
https://notcve.org/view.php?id=CVE-2022-36995
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily create directories on a NetBackup Primary server. Se ha detectado un problema en Veritas NetBackup versiones 8.1.x hasta 8.1.2, 8.2, 8.3.x hasta 8.3.0.2, 9.x hasta 9.0.0.1 y 9.1.x hasta 9.1.0.1 (y productos NetBackup relacionados). Un atacante con acceso autenticado a un cliente de NetBackup podría crear arbitrariamente directorios en un servidor primario de NetBackup • https://www.veritas.com/content/support/en_US/security/VTS22-004#m5 •
CVSS: 6.5EPSS: 0%CPEs: 36EXPL: 0CVE-2022-36996
https://notcve.org/view.php?id=CVE-2022-36996
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server. Se ha detectado un problema en Veritas NetBackup versiones 8.1.x hasta 8.1.2, 8.2, 8.3.x hasta 8.3.0.2, 9.x hasta 9.0.0.1 y 9.1.x hasta 9.1.0.1 (y productos NetBackup relacionados). Un atacante con acceso a un cliente de NetBackup podría recopilar de forma remota información sobre cualquier host conocido por un servidor primario de NetBackup • https://www.veritas.com/content/support/en_US/security/VTS22-004#m6 •
CVSS: 8.8EPSS: 0%CPEs: 35EXPL: 0CVE-2022-36997
https://notcve.org/view.php?id=CVE-2022-36997
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service. Se ha detectado un problema en Veritas NetBackup versiones 8.1.x hasta 8.1.2, 8.2, 8.3.x hasta 8.3.0.2, 9.x hasta 9.0.0.1 y 9.1.x hasta 9.1.0.1 (y productos NetBackup relacionados). Un atacante con acceso autenticado a un cliente de NetBackup podría desencadenar de forma remota impactos que incluyen una lectura arbitraria de archivos, un ataque de tipo Server-Side Request Forgery (SSRF) y una denegación de servicio • https://www.veritas.com/content/support/en_US/security/VTS22-004#h9 • CWE-918: Server-Side Request Forgery (SSRF) •