Medium severity5.3NVD Advisory· Published Oct 3, 2022· Updated Jun 17, 2026

CVE-2022-42305

Description

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service.

Affected products

Symantec/Netbackup2 versions
cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*range: <=10.0.0.1
- (no CPE)
Symantec/NetBackup Primary serverllm-create
Range: <=10.0.0.1

Patches

Vulnerability mechanics

References

www.veritas.com/content/support/en_US/security/VTS22-012nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000