CVE-2022-36954: Veritas Netbackup

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Affected products

• Veritas Netbackup: from 8.0, before 8.3.0.2 (fixed in 8.3.0.2); version 9.0 only; version 9.1.0.0 only

Published 2022-07-27. Last modified 2026-06-17.