Veritas Netbackup Flex Scale Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Veritas Netbackup Flex Scale Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-22965 — CVSS 9.8 (critical) — actively exploited: A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The…
• CVE-2022-46414 — CVSS 9.8 (critical): An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command…
• CVE-2022-46410 — CVSS 8.8 (high): An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root…
• CVE-2022-46411 — CVSS 8.8 (high): An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted…
• CVE-2022-46412 — CVSS 8.8 (high): An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute…
• CVE-2022-46413 — CVSS 8.8 (high): An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command…