Medium severity5.4NVD Advisory· Published Oct 3, 2022· Updated Jun 17, 2026

CVE-2022-42301

Description

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process.

Affected products

Symantec/Netbackup3 versions
cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*range: <=10.0.0.1
- (no CPE)
- (no CPE)range: <=10.0.0.1
Symantec/NetBackup Primary serverllm-create
Range: <=10.0.0.1

Patches

Vulnerability mechanics

References

www.veritas.com/content/support/en_US/security/VTS22-013nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000