Approved changes feed: RSS · Atom

cpe:2.3:a:veritas:netbackup:9.1.0.0:*:*:*:*:*:*:*

part: a version: 9.1.0.0 update: *

VendorVeritas (cb1a4886-9e3d-5084-9dc0-dbd7648341f5)
ProductNetbackup (08bc6183-8c9c-5561-bf4b-8044dfc5114b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36956 vulnerable 2026-06-03 14:47:41.099263 Details available
CRITICAL (9)
In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key from the same domain. The affects 9.0.x through 9.0.0.1 and 9.1.x through 9.1.0.1.
Published: 2022-07-27T20:57:47.000Z
Updated: 2024-08-03T10:21:32.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36955 vulnerable 2026-06-03 14:47:41.098862 Details available
HIGH (7.8)
In Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send specific commands to escalate their privileges. This affects 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1.
Published: 2022-07-27T20:58:09.000Z
Updated: 2024-08-03T10:21:32.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36954 vulnerable 2026-06-03 14:47:41.094971 Details available
CRITICAL (9.9)
In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T20:58:39.000Z
Updated: 2024-08-03T10:21:32.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36953 vulnerable 2026-06-03 14:47:41.094641 Details available
MEDIUM (4.3)
In Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker to gain sensitive information. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T20:59:09.000Z
Updated: 2024-08-03T10:21:32.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36952 vulnerable 2026-06-03 14:47:41.094296 Details available
HIGH (8.4)
In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T20:59:34.000Z
Updated: 2024-08-03T10:21:32.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36951 vulnerable 2026-06-03 14:47:41.093867 Details available
CRITICAL (9.8)
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T20:59:55.000Z
Updated: 2024-08-03T10:21:32.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36950 vulnerable 2026-06-03 14:47:41.093557 Details available
CRITICAL (9.8)
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classloader manipulation. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T21:00:20.000Z
Updated: 2024-08-03T10:21:31.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36949 vulnerable 2026-06-03 14:47:41.093197 Details available
CRITICAL (9.3)
In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T21:00:48.000Z
Updated: 2024-08-03T10:21:32.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36948 vulnerable 2026-06-03 14:47:41.092745 Details available
MEDIUM (5.4)
In Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
Published: 2022-07-27T21:01:05.000Z
Updated: 2024-08-03T10:21:32.254Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.