Approved changes feed: RSS · Atom

cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVeritas (cb1a4886-9e3d-5084-9dc0-dbd7648341f5)
ProductNetbackup Appliance (9cfae2e7-95c8-5b6e-ab74-24c870d4a036)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28222 vulnerable 2026-06-03 14:55:25.329360 Details available
CRITICAL (9.8)
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.
Published: 2024-03-07T00:00:00.000Z
Updated: 2024-11-15T19:13:08.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9868 vulnerable 2026-06-03 14:40:49.937853 Details available
An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator.
Published: 2019-03-19T15:54:00.000Z
Updated: 2024-08-04T22:01:54.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9867 vulnerable 2026-06-03 14:40:49.937443 Details available
An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator.
Published: 2019-03-19T15:53:29.000Z
Updated: 2024-08-04T22:01:54.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18652 vulnerable 2026-06-03 14:38:28.164830 Details available
A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.
Published: 2018-10-25T23:00:00.000Z
Updated: 2024-08-05T11:16:00.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8859 vulnerable 2026-06-03 14:37:40.742429 Details available
In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.
Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8858 vulnerable 2026-06-03 14:37:40.742060 Details available
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process.
Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8857 vulnerable 2026-06-03 14:37:40.741641 Details available
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process.
Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8856 vulnerable 2026-06-03 14:37:40.741079 Details available
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.
Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6409 vulnerable 2026-06-03 14:37:27.690550 Details available
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6408 vulnerable 2026-06-03 14:37:27.690256 Details available
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6407 vulnerable 2026-06-03 14:37:27.689930 Details available
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6406 vulnerable 2026-06-03 14:37:27.689607 Details available
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6405 vulnerable 2026-06-03 14:37:27.689269 Details available
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6404 vulnerable 2026-06-03 14:37:27.688956 Details available
An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6403 vulnerable 2026-06-03 14:37:27.688635 Details available
An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6402 vulnerable 2026-06-03 14:37:27.688161 Details available
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6401 vulnerable 2026-06-03 14:37:27.687840 Details available
An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6400 vulnerable 2026-06-03 14:37:27.687506 Details available
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system).
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6399 vulnerable 2026-06-03 14:37:27.687042 Details available
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.
Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.