CVE-2022-36996

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with access to a NetBackup Client could remotely gather information about any host known to a NetBackup Primary server.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jul 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-369978.8An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 CVE-2022-369986.5An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 CVE-2022-369996.5An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 CVE-2022-37006.3A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that CVE-2022-370006.5An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 CVE-2022-370017.5The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerabil CVE-2022-370029.8The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications CVE-2022-370039.8The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation a CVE-2022-370047.5The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability ma CVE-2022-370057.5The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidential CVE-2022-370067.5Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.CVE-2022-370077.5The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.