Veritas Netbackup Appliance 4.1.0.1 Maintenance Release2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release2:*:*:*:*:*:*

part: h version: 4.1.0.1 update: maintenance_release2

VendorVeritas (cb1a4886-9e3d-5084-9dc0-dbd7648341f5)
ProductNetbackup Appliance (9cfae2e7-95c8-5b6e-ab74-24c870d4a036)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37237 vulnerable 2026-06-03 14:52:28.570671 Details available
MEDIUM (6.5)
In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.
Published: 2023-06-29T00:00:00.000Z
Updated: 2024-11-26T19:40:11.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37000 vulnerable 2026-06-03 14:47:41.215791 Details available
MEDIUM (6.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
Published: 2022-07-28T00:47:45.000Z
Updated: 2024-08-03T10:21:32.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36999 vulnerable 2026-06-03 14:47:41.214340 Details available
MEDIUM (6.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
Published: 2022-07-28T00:48:49.000Z
Updated: 2024-08-03T10:21:32.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36998 vulnerable 2026-06-03 14:47:41.213019 Details available
MEDIUM (6.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service.
Published: 2022-07-28T00:49:24.000Z
Updated: 2024-08-03T10:21:32.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36997 vulnerable 2026-06-03 14:47:41.211793 Details available
HIGH (7.1)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.
Published: 2022-07-28T00:50:36.000Z
Updated: 2024-08-03T10:21:32.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36996 vulnerable 2026-06-03 14:47:41.210458 Details available
MEDIUM (4.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server.
Published: 2022-07-28T00:51:09.000Z
Updated: 2024-08-03T10:21:32.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36995 vulnerable 2026-06-03 14:47:41.160373 Details available
MEDIUM (4.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily create directories on a NetBackup Primary server.
Published: 2022-07-28T00:51:31.000Z
Updated: 2024-08-03T10:21:32.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36994 vulnerable 2026-06-03 14:47:41.159336 Details available
MEDIUM (6.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server.
Published: 2022-07-28T00:52:07.000Z
Updated: 2024-08-03T10:21:32.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36993 vulnerable 2026-06-03 14:47:41.158331 Details available
HIGH (8.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:52:38.000Z
Updated: 2024-08-03T10:21:32.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36992 vulnerable 2026-06-03 14:47:41.157322 Details available
CRITICAL (9.9)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server (in specific notify conditions).
Published: 2022-07-28T00:53:07.000Z
Updated: 2024-08-03T10:21:32.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36991 vulnerable 2026-06-03 14:47:41.156248 Details available
HIGH (8.1)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path on a NetBackup Primary server.
Published: 2022-07-28T00:53:39.000Z
Updated: 2024-08-03T10:21:32.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36990 vulnerable 2026-06-03 14:47:41.155267 Details available
CRITICAL (9.6)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely write arbitrary files to arbitrary locations from any Client to any other Client via a Primary server.
Published: 2022-07-28T00:54:19.000Z
Updated: 2024-08-03T10:21:32.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36989 vulnerable 2026-06-03 14:47:41.154200 Details available
HIGH (8.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:54:44.000Z
Updated: 2024-08-03T10:21:32.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36988 vulnerable 2026-06-03 14:47:41.153166 Details available
HIGH (8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server.
Published: 2022-07-28T00:55:06.000Z
Updated: 2024-08-03T10:21:32.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36987 vulnerable 2026-06-03 14:47:41.151860 Details available
HIGH (8.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write files to a NetBackup Primary server.
Published: 2022-07-28T00:55:34.000Z
Updated: 2024-08-03T10:21:32.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36986 vulnerable 2026-06-03 14:47:41.150872 Details available
HIGH (8.6)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:56:03.000Z
Updated: 2024-08-03T10:21:32.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36985 vulnerable 2026-06-03 14:47:41.149731 Details available
HIGH (7.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.
Published: 2022-07-28T00:56:33.000Z
Updated: 2024-08-03T10:21:32.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36984 vulnerable 2026-06-03 14:47:41.148586 Details available
HIGH (7.7)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a denial of service attack against a NetBackup Primary server.
Published: 2022-07-28T00:57:02.000Z
Updated: 2024-08-03T10:21:32.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22965 vulnerable 2026-06-03 14:46:25.861188 Details available
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Published: 2022-04-01T22:17:30.000Z
Updated: 2025-10-21T23:15:42.792Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.