Filtered by vendor Veritas
Subscriptions
Total
133 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2017-6409 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access. | ||||
CVE-2017-6408 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured. | ||||
CVE-2017-6407 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur. | ||||
CVE-2017-6406 | 1 Veritas | 3 Access, Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur. | ||||
CVE-2017-6405 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing. | ||||
CVE-2017-6404 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data. | ||||
CVE-2017-6403 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password. | ||||
CVE-2017-6402 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur. | ||||
CVE-2017-6401 | 1 Veritas | 2 Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat. | ||||
CVE-2017-6400 | 1 Veritas | 3 Access, Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system). | ||||
CVE-2017-6399 | 1 Veritas | 3 Access, Netbackup, Netbackup Appliance | 2024-11-21 | N/A |
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur. | ||||
CVE-2024-52945 | 1 Veritas | 1 Netbackup | 2024-11-19 | 7.8 High |
An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context. | ||||
CVE-2024-52944 | 1 Veritas | 1 Enterprise Vault | 2024-11-19 | 5.4 Medium |
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user. |