VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 3, 2022· Updated Aug 3, 2024

CVE-2022-42307

CVE-2022-42307

Description

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.

Affected products

2
  • Symantec/Netbackupcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=10.0.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.