Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
veritas netbackup appliance vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2017-8857
In Veritas NetBackup 8.0 and previous versions and NetBackup Appliance 3.0 and previous versions, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process.
Veritas Netbackup
Veritas Netbackup Appliance
10
CVSSv2
CVE-2017-8858
In Veritas NetBackup 8.0 and previous versions and NetBackup Appliance 3.0 and previous versions, there is unauthenticated privileged remote file write using the 'bprd' process.
Veritas Netbackup
Veritas Netbackup Appliance
10
CVSSv2
CVE-2017-8859
In Veritas NetBackup Appliance 3.0 and previous versions, unauthenticated users can execute arbitrary commands as root.
Veritas Netbackup Appliance 2.7.3
Veritas Netbackup Appliance
Veritas Netbackup Appliance 3.0
10
CVSSv2
CVE-2016-7399
scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x up to and including 2.6.0.4, 2.6.1.x up to and including 2.6.1.2, 2.7.x up to and including 2.7.3, and 3.0.x allow remote malicious users to execute arbitrary commands via shell metacharacters in the hostName parameter to ...
Veritas Netbackup Appliance Firmware 2.6.0.0
Veritas Netbackup Appliance Firmware 2.6.0.1
Veritas Netbackup Appliance Firmware 2.7.1.0
Veritas Netbackup Appliance Firmware 2.7.2.0
Veritas Netbackup Appliance Firmware 2.6.0.4
Veritas Netbackup Appliance Firmware 2.6.1.0
Veritas Netbackup Appliance Firmware 2.6.0.2
Veritas Netbackup Appliance Firmware 2.6.0.3
Veritas Netbackup Appliance Firmware 3.0.0.0
Veritas Netbackup Appliance Firmware 2.6.1.1
Veritas Netbackup Appliance Firmware 2.6.1.2
Veritas Netbackup Appliance Firmware 2.7.0.0
10
CVSSv2
CVE-2015-6550
bpcd in Veritas NetBackup 7.x up to and including 7.5.0.7, 7.6.0.x up to and including 7.6.0.4, 7.6.1.x up to and including 7.6.1.2, and 7.7.x prior to 7.7.2 and NetBackup Appliance up to and including 2.5.4, 2.6.0.x up to and including 2.6.0.4, 2.6.1.x up to and including 2.6.1....
Veritas Netbackup Appliance 2.7.1
Veritas Netbackup Appliance 2.6.1.2
Veritas Netbackup Appliance 2.5.3
Veritas Netbackup Appliance 2.5.2
Veritas Netbackup Appliance 1.2
Veritas Netbackup Appliance 1.1.0.2
Veritas Netbackup Appliance 1.1.0.1
Veritas Netbackup Appliance 2.6.0.2
Veritas Netbackup Appliance 2.6
Veritas Netbackup Appliance 2.0.1
Veritas Netbackup Appliance 2.0
Veritas Netbackup Appliance 2.6.1.1
Veritas Netbackup Appliance 2.6.1
Veritas Netbackup Appliance 2.5.1
Veritas Netbackup Appliance 2.5
Veritas Netbackup Appliance 2.6.0.4
Veritas Netbackup Appliance 2.6.0.3
Veritas Netbackup Appliance 2.0.3
Veritas Netbackup Appliance 2.0.2
Veritas Netbackup 7.6.0.2
Veritas Netbackup 7.5.0.7
Veritas Netbackup 7.1.0.3
10
CVSSv2
CVE-2015-6552
The management-services protocol implementation in Veritas NetBackup 7.x up to and including 7.5.0.7, 7.6.0.x up to and including 7.6.0.4, 7.6.1.x up to and including 7.6.1.2, and 7.7.x prior to 7.7.2 and NetBackup Appliance up to and including 2.5.4, 2.6.0.x up to and including ...
Veritas Netbackup Appliance 2.7.1
Veritas Netbackup Appliance 2.6.1.2
Veritas Netbackup Appliance 2.5.2
Veritas Netbackup Appliance 2.5.1
Veritas Netbackup Appliance 1.1.0.2
Veritas Netbackup Appliance 1.1.0.1
Veritas Netbackup Appliance 2.6.1.1
Veritas Netbackup Appliance 2.6.1
Veritas Netbackup Appliance 2.6.0.4
Veritas Netbackup Appliance 2.5
Veritas Netbackup Appliance 2.0.3
Veritas Netbackup Appliance 2.6
Veritas Netbackup Appliance 2.5.3
Veritas Netbackup Appliance 2.0
Veritas Netbackup Appliance 1.2
Veritas Netbackup Appliance 2.6.0.3
Veritas Netbackup Appliance 2.6.0.2
Veritas Netbackup Appliance 2.0.2
Veritas Netbackup Appliance 2.0.1
Veritas Netbackup 7.6.0.2
Veritas Netbackup 7.5.0.7
Veritas Netbackup 7.5.0.6
9
CVSSv2
CVE-2018-18652
A remote command execution vulnerability in Veritas NetBackup Appliance prior to 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.
Veritas Netbackup Appliance
7.5
CVSSv2
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring Framework
Cisco Cx Cloud Agent
Oracle Sd-wan Edge 9.0
Oracle Retail Xstore Point Of Service 20.0.1
Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0
Oracle Financial Services Analytical Applications Infrastructure 8.1.1
Oracle Sd-wan Edge 9.1
Siemens Siveillance Identity 1.6
Siemens Siveillance Identity 1.5
Siemens Sipass Integrated 2.85
Siemens Sipass Integrated 2.80
Oracle Product Lifecycle Analytics 3.6.1
Oracle Financial Services Enterprise Case Management 8.1.1.0
Oracle Financial Services Enterprise Case Management 8.1.1.1
Oracle Financial Services Behavior Detection Platform 8.1.2.0
Oracle Financial Services Behavior Detection Platform 8.1.1.1
Oracle Financial Services Behavior Detection Platform 8.1.1.0
Oracle Communications Cloud Native Core Console 1.9.0
Oracle Communications Cloud Native Core Policy 1.15.0
Oracle Communications Cloud Native Core Unified Data Repository 1.15.0
Oracle Communications Cloud Native Core Unified Data Repository 22.1.0
Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
170 Github repositories
7 Articles
7.5
CVSSv2
CVE-2017-8856
In Veritas NetBackup 8.0 and previous versions and NetBackup Appliance 3.0 and previous versions, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.
Veritas Netbackup
Veritas Netbackup Appliance
7.5
CVSSv2
CVE-2017-6403
An issue exists in Veritas NetBackup prior to 8.0 and NetBackup Appliance prior to 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password.
Veritas Netbackup Appliance
Veritas Netbackup
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »