Veritas Netbackup vulnerabilities, page 4
67 vulnerabilities
Known vulnerabilities in Veritas Netbackup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-28222veritasnetbackup+1
EPSS score0.99%
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.CVE-2024-33672veritasnetbackupEPSS score0.17%
An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files.CVE-2023-28759veritasnetbackupEPSS score0.19%
An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system.CVE-2023-28758veritasnetbackupEPSS score0.15%
An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files.CVE-2006-0990veritasnetbackupEPSS score8.11%
Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.CVE-2006-0989veritasnetbackupEPSS score8.11%
Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.CVE-2006-0991veritasnetbackupEPSS score11.22%
Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724).