Medium severity5.3NVD Advisory· Published Oct 3, 2022· Updated Jun 17, 2026

CVE-2022-42307

Description

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.

Affected products

Symantec/Netbackup3 versions
cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*range: <=10.0.0.1
- (no CPE)
- (no CPE)range: <=10.0.0.1
Symantec/NetBackup Primary serverllm-create
Range: <=10.0.0.1

Patches

Vulnerability mechanics

References

www.veritas.com/content/support/en_US/security/VTS22-012nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000