veritas Vulnerability Advisory Catalog

Total 138 security vulnerabilities recorded for veritas software and firmware.

← Back to All Vendors
CVE-2020-36160 CRITICAL
Component: system_recovery

An issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL library from \usr\local\ssl. This library attempts t...

📅 2021-01-06
CVSS 9.3 Dossier →
Component: desktop_and_laptop_option

Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not requir...

📅 2021-01-05
CVSS 5.3 Dossier →
Component: aptare

Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to t...

📅 2020-10-15
CVSS 8.1 Dossier →
CVE-2020-27156 CRITICAL
Component: aptare

Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This vulnerability could allow for remote code execution by an un...

📅 2020-10-15
CVSS 9.8 Dossier →
Component: aptare

Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication....

📅 2020-05-14
CVSS 7.5 Dossier →
Component: aptare

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows s...

📅 2020-05-14
CVSS 7.5 Dossier →
Component: aptare

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive...

📅 2020-05-14
CVSS 6.3 Dossier →
CVE-2020-12874 CRITICAL
Component: aptare

Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication credentials were provided to t...

📅 2020-05-14
CVSS 9.8 Dossier →
CVE-2019-18780 CRITICAL
Component: access

An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute...

📅 2019-11-05
CVSS 9.8 Dossier →
Component: resiliency_platform

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability...

📅 2019-07-29
CVSS 8.8 Dossier →
Component: resiliency_platform

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user ...

📅 2019-07-29
CVSS 7.2 Dossier →
Component: resiliency_platform

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user ...

📅 2019-07-29
CVSS 7.2 Dossier →
Component: resiliency_platform

An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a malicious ...

📅 2019-07-29
CVSS 4.8 Dossier →
Component: netbackup_appliance

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator....

📅 2019-03-21
CVSS 7.2 Dossier →
Component: netbackup_appliance

An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator....

📅 2019-03-21
CVSS 7.2 Dossier →
Component: netbackup_appliance

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands...

📅 2018-10-25
CVSS 7.2 Dossier →
CVE-2017-8895 CRITICAL
Component: backup_exec

In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in...

📅 2017-05-10
CVSS 9.8 Dossier →
CVE-2017-8859 CRITICAL
Component: netbackup_appliance

In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root....

📅 2017-05-09
CVSS 9.8 Dossier →
CVE-2017-8858 CRITICAL
Component: netbackup

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' p...

📅 2017-05-09
CVSS 9.8 Dossier →
CVE-2017-8857 CRITICAL
Component: netbackup

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command executio...

📅 2017-05-09
CVSS 9.8 Dossier →
CVE-2017-8856 CRITICAL
Component: netbackup

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the '...

📅 2017-05-09
CVSS 9.8 Dossier →
Component: system_recovery

In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directo...

📅 2017-04-05
CVSS 7.8 Dossier →
CVE-2017-6409 CRITICAL
Component: netbackup

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inapprop...

📅 2017-03-02
CVSS 9.8 Dossier →
Component: netbackup

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in p...

📅 2017-03-02
CVSS 7.0 Dossier →
Page 5 of 6 (138 Total Records)