8.8

CVE-2022-36988

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server.

Data is provided by the National Vulnerability Database (NVD)
VeritasFlex Appliance Version1.2
VeritasFlex Appliance Version1.3
VeritasFlex Appliance Version2.0
VeritasFlex Appliance Version2.0.1
VeritasFlex Appliance Version2.0.2
VeritasFlex Appliance Version2.1
VeritasFlex Scale Version1.3.1
VeritasFlex Scale Version2.1
VeritasNetbackup Version8.1.1
VeritasNetbackup Version8.1.2
VeritasNetbackup Version8.2
VeritasNetbackup Version8.3
VeritasNetbackup Version8.3.0.1
VeritasNetbackup Version8.3.0.2
VeritasNetbackup Version9.0
VeritasNetbackup Version9.0.0.1
VeritasNetbackup Version9.1
VeritasNetbackup Version9.1.0.1
VeritasNetbackup Appliance Version3.1.1
VeritasNetbackup Appliance Version3.1.2
VeritasNetbackup Appliance Version3.2
VeritasNetbackup Appliance Version4.0
VeritasNetbackup Appliance Version4.1
VeritasNetbackup Appliance Version3.2 Updatemaintenance_release1
VeritasNetbackup Appliance Version3.2 Updatemaintenance_release2
VeritasNetbackup Appliance Version3.2 Updatemaintenance_release3
VeritasNetbackup Appliance Version3.3.0.1 Updatemaintenance_release1
VeritasNetbackup Appliance Version3.3.0.1 Updatemaintenance_release2
VeritasNetbackup Appliance Version3.3.0.2 Updatemaintenance_release1
VeritasNetbackup Appliance Version3.3.0.2 Updatemaintenance_release2
VeritasNetbackup Appliance Version4.0.0.1 Updatemaintenance_release1
VeritasNetbackup Appliance Version4.0.0.1 Updatemaintenance_release2
VeritasNetbackup Appliance Version4.0.0.1 Updatemaintenance_release3
VeritasNetbackup Appliance Version4.1.0.1 Updatemaintenance_release1
VeritasNetbackup Appliance Version4.1.0.1 Updatemaintenance_release2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.57% 0.676
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cve@mitre.org 8 1.3 6
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H