Veritas Netbackup Appliance 4.1.0.1 Maintenance Release1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release1:*:*:*:*:*:*

part: h version: 4.1.0.1 update: maintenance_release1

VendorVeritas (cb1a4886-9e3d-5084-9dc0-dbd7648341f5)
ProductNetbackup Appliance (9cfae2e7-95c8-5b6e-ab74-24c870d4a036)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37237 vulnerable 2026-06-03 14:52:28.569886 Details available
MEDIUM (6.5)
In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.
Published: 2023-06-29T00:00:00.000Z
Updated: 2024-11-26T19:40:11.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37000 vulnerable 2026-06-03 14:47:41.215770 Details available
MEDIUM (6.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
Published: 2022-07-28T00:47:45.000Z
Updated: 2024-08-03T10:21:32.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36999 vulnerable 2026-06-03 14:47:41.214320 Details available
MEDIUM (6.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
Published: 2022-07-28T00:48:49.000Z
Updated: 2024-08-03T10:21:32.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36998 vulnerable 2026-06-03 14:47:41.212999 Details available
MEDIUM (6.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service.
Published: 2022-07-28T00:49:24.000Z
Updated: 2024-08-03T10:21:32.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36997 vulnerable 2026-06-03 14:47:41.211774 Details available
HIGH (7.1)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.
Published: 2022-07-28T00:50:36.000Z
Updated: 2024-08-03T10:21:32.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36996 vulnerable 2026-06-03 14:47:41.210439 Details available
MEDIUM (4.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server.
Published: 2022-07-28T00:51:09.000Z
Updated: 2024-08-03T10:21:32.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36995 vulnerable 2026-06-03 14:47:41.160356 Details available
MEDIUM (4.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily create directories on a NetBackup Primary server.
Published: 2022-07-28T00:51:31.000Z
Updated: 2024-08-03T10:21:32.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36994 vulnerable 2026-06-03 14:47:41.159320 Details available
MEDIUM (6.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server.
Published: 2022-07-28T00:52:07.000Z
Updated: 2024-08-03T10:21:32.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36993 vulnerable 2026-06-03 14:47:41.158315 Details available
HIGH (8.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:52:38.000Z
Updated: 2024-08-03T10:21:32.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36992 vulnerable 2026-06-03 14:47:41.157254 Details available
CRITICAL (9.9)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server (in specific notify conditions).
Published: 2022-07-28T00:53:07.000Z
Updated: 2024-08-03T10:21:32.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36991 vulnerable 2026-06-03 14:47:41.156233 Details available
HIGH (8.1)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path on a NetBackup Primary server.
Published: 2022-07-28T00:53:39.000Z
Updated: 2024-08-03T10:21:32.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36990 vulnerable 2026-06-03 14:47:41.155250 Details available
CRITICAL (9.6)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely write arbitrary files to arbitrary locations from any Client to any other Client via a Primary server.
Published: 2022-07-28T00:54:19.000Z
Updated: 2024-08-03T10:21:32.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36989 vulnerable 2026-06-03 14:47:41.154184 Details available
HIGH (8.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:54:44.000Z
Updated: 2024-08-03T10:21:32.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36988 vulnerable 2026-06-03 14:47:41.153147 Details available
HIGH (8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server.
Published: 2022-07-28T00:55:06.000Z
Updated: 2024-08-03T10:21:32.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36987 vulnerable 2026-06-03 14:47:41.151843 Details available
HIGH (8.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write files to a NetBackup Primary server.
Published: 2022-07-28T00:55:34.000Z
Updated: 2024-08-03T10:21:32.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36986 vulnerable 2026-06-03 14:47:41.150857 Details available
HIGH (8.6)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:56:03.000Z
Updated: 2024-08-03T10:21:32.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36985 vulnerable 2026-06-03 14:47:41.149714 Details available
HIGH (7.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.
Published: 2022-07-28T00:56:33.000Z
Updated: 2024-08-03T10:21:32.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36984 vulnerable 2026-06-03 14:47:41.148101 Details available
HIGH (7.7)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a denial of service attack against a NetBackup Primary server.
Published: 2022-07-28T00:57:02.000Z
Updated: 2024-08-03T10:21:32.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22965 vulnerable 2026-06-03 14:46:25.860647 Details available
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Published: 2022-04-01T22:17:30.000Z
Updated: 2025-10-21T23:15:42.792Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.