Veritas Schwachstellen

Zeitverlauf

Typ

Produkt

Veritas NetBackup57
Veritas NetBackup Appliance10
Symantec Veritas Backup Exec8
Veritas NetBackup OpsCenter7
Veritas Enterprise Vault7

Massnahmen

Official Fix69
Temporary Fix0
Workaround8
Unavailable0
Not Defined64

Ausnutzbarkeit

High5
Functional0
Proof-of-Concept23
Unproven0
Not Defined113

Zugriffsart

Not Defined0
Physical0
Local14
Adjacent4
Network123

Authentisierung

Not Defined0
High14
Low63
None64

Benutzeraktivität

Not Defined0
Required8
None133

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤42
≤512
≤620
≤725
≤831
≤938
≤1012

CVSSv3 Temp

≤10
≤20
≤31
≤42
≤516
≤624
≤727
≤831
≤930
≤1010

VulDB

≤10
≤20
≤35
≤43
≤517
≤619
≤724
≤842
≤921
≤1010

NVD

≤10
≤20
≤30
≤40
≤51
≤64
≤715
≤814
≤910
≤1014

CNA

≤10
≤20
≤30
≤40
≤56
≤68
≤76
≤816
≤911
≤1015

Hersteller

≤10
≤20
≤30
≤41
≤50
≤60
≤72
≤80
≤93
≤105

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k12
<2k44
<5k59
<10k6
<25k7
<50k11
<100k2
≥100k0

Exploit heute

<1k117
<2k17
<5k3
<10k3
<25k0
<50k1
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (32): APTARE (7), Access Appliance (3), Appliance (1), Backup Exec (15), Bare Metal Restore (1), CloudPoint (1), Cluster Server (3), Desktop Laptop Option (1), Desktop and Laptop Option (2), Enterprise Vault (7), File System (1), InfoScale (2), InfoScale Operations Manager (6), NetBackUp OpsCenter (1), NetBackup (57), NetBackup Appliance (10), NetBackup Flex Scale (5), NetBackup IT Analytics (1), NetBackup OpsCenter (7), NetBackup OpsCenter Analytics (1), NetBackup PureDisk Remote Office Edition (1), NetBackup Snapshot Manager (1), Netbackup (1), OpsCenter (2), Resiliency Platform (5), StorageCentral (1), Storage Exec (1), Storage Foundation (2), Storage Foundation HA (1), System Recovery (4), eDiscovery Platform (1), i3 Focalpoint Server (1)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
07.03.20246.36.0Veritas NetBackup/NetBackup Appliance BPCD Process erweiterte RechteBackup SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-28222
22.02.20245.95.8Veritas eDiscovery Platform erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000430.02CVE-2024-27283
11.08.20238.58.4Veritas NetBackup Snapshot Manager RabbitMQ Service schwache AuthentisierungBackup SoftwareNot DefinedOfficial Fix0.000610.03CVE-2023-40256
18.07.20237.47.3Veritas InfoScale Operations Manager XPRTLD Web Application erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000540.00CVE-2023-38404
29.06.20237.06.9Veritas NetBackup Appliance SSH erweiterte RechteBackup SoftwareNot DefinedOfficial Fix0.000500.02CVE-2023-37237
10.05.20237.27.2Veritas InfoScale Operations Manager Web Application SQL InjectionUnbekanntNot DefinedOfficial Fix0.000770.00CVE-2023-32569
10.05.20237.27.0Veritas InfoScale Operations Manager Web Application erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000560.07CVE-2023-32568
10.04.20236.26.1Veritas Appliance HTTP Host Header erweiterte RechteUnbekanntNot DefinedNot Defined0.000550.02CVE-2023-26788
05.04.20234.84.7Veritas NetBackUp OpsCenter Cross Site ScriptingBackup SoftwareNot DefinedNot Defined0.000590.00CVE-2023-26789
24.03.20235.95.8Veritas NetBackup IT Analytics Application Upgrade schwache AuthentisierungBackup SoftwareNot DefinedOfficial Fix0.000630.00CVE-2023-28818
23.03.20237.87.6Veritas NetBackup erweiterte RechteBackup SoftwareNot DefinedOfficial Fix0.000430.06CVE-2023-28759
23.03.20235.75.6Veritas NetBackup Log File unbekannte SchwachstelleBackup SoftwareNot DefinedOfficial Fix0.000430.02CVE-2023-28758
04.12.20228.88.8Veritas NetBackup Flex Scale erweiterte RechteBackup SoftwareNot DefinedNot Defined0.000890.02CVE-2022-46412
04.12.20229.89.8Veritas NetBackup Flex Scale/Access Appliance Management Portal Remote Code ExecutionBackup SoftwareNot DefinedNot Defined0.002530.02CVE-2022-46414
04.12.20228.88.8Veritas NetBackup Flex Scale/Access Appliance Management Portal Privilege EscalationBackup SoftwareNot DefinedNot Defined0.001310.04CVE-2022-46413
04.12.20228.88.8Veritas NetBackup Flex Scale erweiterte RechteBackup SoftwareNot DefinedNot Defined0.000890.00CVE-2022-46410
04.12.20228.88.8Veritas NetBackup Flex Scale/Access Appliance Installation schwache AuthentisierungBackup SoftwareNot DefinedNot Defined0.000890.02CVE-2022-46411
17.11.20227.97.9Veritas NetBackup Java Admin Console erweiterte RechteBackup SoftwareNot DefinedNot Defined0.001010.05CVE-2022-45461
03.10.20227.57.5Veritas NetBackup pbx_exchange Registration Directory TraversalBackup SoftwareNot DefinedNot Defined0.000440.04CVE-2022-42308
03.10.20227.57.5Veritas NetBackup DiscoveryService XML External EntityBackup SoftwareNot DefinedNot Defined0.001940.03CVE-2022-42307
03.10.20225.45.4Veritas NetBackup pbx_exchange Denial of ServiceBackup SoftwareNot DefinedNot Defined0.000420.03CVE-2022-42306
03.10.20226.86.8Veritas NetBackup nbars XML External EntityBackup SoftwareNot DefinedNot Defined0.000930.00CVE-2022-42301
03.10.20226.76.7Veritas NetBackup DiscoveryService Directory TraversalBackup SoftwareNot DefinedNot Defined0.001550.03CVE-2022-42305
03.10.20226.36.3Veritas NetBackup idm/nbars/SLP SQL InjectionBackup SoftwareNot DefinedNot Defined0.001370.00CVE-2022-42304
03.10.20227.57.5Veritas NetBackup NBFSMCLIENT Service SQL InjectionBackup SoftwareNot DefinedNot Defined0.001370.00CVE-2022-42303

116 weitere Einträge werden nicht mehr angezeigt

Interested in the pricing of exploits?

See the underground prices here!