CVE-2022-42303

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products

High · published October 3, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00615 · 48.8th percentile
Published
2022-10-03T14:48Z
EPSS history
Timeline
  • 03 OCT 14:48Z
    An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products
    cvelistv5