Veritas NetBackup Appliance 4.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:veritas:netbackup_appliance:4.1:*:*:*:*:*:*:*

part: a version: 4.1 update: *

VendorVeritas (cb1a4886-9e3d-5084-9dc0-dbd7648341f5)
ProductNetbackup Appliance (9cfae2e7-95c8-5b6e-ab74-24c870d4a036)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-37000 vulnerable 2026-06-03 14:47:41.215543 Details available
MEDIUM (6.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
Published: 2022-07-28T00:47:45.000Z
Updated: 2024-08-03T10:21:32.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36999 vulnerable 2026-06-03 14:47:41.214091 Details available
MEDIUM (6.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
Published: 2022-07-28T00:48:49.000Z
Updated: 2024-08-03T10:21:32.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36998 vulnerable 2026-06-03 14:47:41.212786 Details available
MEDIUM (6.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service.
Published: 2022-07-28T00:49:24.000Z
Updated: 2024-08-03T10:21:32.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36997 vulnerable 2026-06-03 14:47:41.211562 Details available
HIGH (7.1)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.
Published: 2022-07-28T00:50:36.000Z
Updated: 2024-08-03T10:21:32.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36996 vulnerable 2026-06-03 14:47:41.210216 Details available
MEDIUM (4.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server.
Published: 2022-07-28T00:51:09.000Z
Updated: 2024-08-03T10:21:32.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36995 vulnerable 2026-06-03 14:47:41.160184 Details available
MEDIUM (4.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily create directories on a NetBackup Primary server.
Published: 2022-07-28T00:51:31.000Z
Updated: 2024-08-03T10:21:32.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36994 vulnerable 2026-06-03 14:47:41.159137 Details available
MEDIUM (6.3)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server.
Published: 2022-07-28T00:52:07.000Z
Updated: 2024-08-03T10:21:32.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36993 vulnerable 2026-06-03 14:47:41.158134 Details available
HIGH (8.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:52:38.000Z
Updated: 2024-08-03T10:21:32.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36992 vulnerable 2026-06-03 14:47:41.157065 Details available
CRITICAL (9.9)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server (in specific notify conditions).
Published: 2022-07-28T00:53:07.000Z
Updated: 2024-08-03T10:21:32.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36991 vulnerable 2026-06-03 14:47:41.156054 Details available
HIGH (8.1)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write content to a partially controlled path on a NetBackup Primary server.
Published: 2022-07-28T00:53:39.000Z
Updated: 2024-08-03T10:21:32.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36990 vulnerable 2026-06-03 14:47:41.155014 Details available
CRITICAL (9.6)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely write arbitrary files to arbitrary locations from any Client to any other Client via a Primary server.
Published: 2022-07-28T00:54:19.000Z
Updated: 2024-08-03T10:21:32.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36989 vulnerable 2026-06-03 14:47:41.154003 Details available
HIGH (8.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:54:44.000Z
Updated: 2024-08-03T10:21:32.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36988 vulnerable 2026-06-03 14:47:41.152956 Details available
HIGH (8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server.
Published: 2022-07-28T00:55:06.000Z
Updated: 2024-08-03T10:21:32.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36987 vulnerable 2026-06-03 14:47:41.151671 Details available
HIGH (8.5)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write files to a NetBackup Primary server.
Published: 2022-07-28T00:55:34.000Z
Updated: 2024-08-03T10:21:32.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36986 vulnerable 2026-06-03 14:47:41.150684 Details available
HIGH (8.6)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.
Published: 2022-07-28T00:56:03.000Z
Updated: 2024-08-03T10:21:32.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36985 vulnerable 2026-06-03 14:47:41.149532 Details available
HIGH (7.8)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.
Published: 2022-07-28T00:56:33.000Z
Updated: 2024-08-03T10:21:32.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36984 vulnerable 2026-06-03 14:47:41.142428 Details available
HIGH (7.7)
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a denial of service attack against a NetBackup Primary server.
Published: 2022-07-28T00:57:02.000Z
Updated: 2024-08-03T10:21:32.609Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.