Skip to main content

Flex Appliance

19 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-22965 Apr 01, 23:15 Maven CRITICAL POC KEV PATCH THREAT Act Now

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Java Cisco Code Injection Oracle +42
NVD VulDB HeroDevs
CVSS 3.1
9.8
EPSS
99.7%
CVE-2022-37000 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-36999 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-36998 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Denial Of Service Memory Corruption Netbackup Netbackup Appliance +3
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-36997 Jul 28, 01:15 HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

Denial Of Service SSRF Netbackup Netbackup Appliance Flex Appliance +2
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2022-36996 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2022-36995 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
4.3
EPSS
0.4%
CVE-2022-36994 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2022-36993 Jul 28, 01:15 HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2022-36992 Jul 28, 01:15 HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2022-36991 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-36990 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-36989 Jul 28, 01:15 HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2022-36988 Jul 28, 01:15 HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-36987 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-36986 Jul 28, 01:15 CRITICAL PATCH Act Now

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-36985 Jul 28, 01:15 HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Microsoft Netbackup Netbackup Appliance Flex Appliance +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-36984 Jul 28, 01:15 MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Netbackup Netbackup Appliance Flex Appliance Flex Scale +1
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2019-18780 Nov 05, 20:15 CRITICAL PATCH Act Now

An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Microsoft Access Cluster Server Access Appliance +4
NVD
CVSS 3.1
9.8
EPSS
6.1%
CVE-2022-22965 Maven
EPSS 100% CVSS 9.8
CRITICAL POC KEV PATCH THREAT Act Now

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Java Cisco +44
NVD VulDB HeroDevs
CVE-2022-37000
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36999
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36998
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Denial Of Service Memory Corruption +5
NVD
CVE-2022-36997
EPSS 1% CVSS 8.8
HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

Denial Of Service SSRF Netbackup +4
NVD
CVE-2022-36996
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36995
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36994
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36993
EPSS 1% CVSS 8.8
HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36992
EPSS 1% CVSS 8.8
HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36991
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36990
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36989
EPSS 1% CVSS 8.8
HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36988
EPSS 1% CVSS 8.8
HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36987
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36986
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netbackup Netbackup Appliance +3
NVD
CVE-2022-36985
EPSS 0% CVSS 7.8
HIGH PATCH This Week

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Microsoft Netbackup +4
NVD
CVE-2022-36984
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Netbackup Netbackup Appliance +3
NVD
CVE-2019-18780
EPSS 6% CVSS 9.8
CRITICAL PATCH Act Now

An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Microsoft Access +6
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy