Veritas Access vulnerabilities

4 CVEs affecting Veritas Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18780, published 2019-11-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18780, published 2019-11-05. Critical severity, CVSS 9.8. EPSS: 6.1% chance of exploitation in the next 30 days. An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator.…
CVE-2017-6399, published 2017-03-02. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected…
CVE-2017-6406, published 2017-03-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can…
CVE-2017-6400, published 2017-03-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system).