Описание
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.0.0.1 (включая)
cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00178
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-611
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.
EPSS
Процентиль: 39%
0.00178
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-611