Veritas Aptare It Analytics vulnerabilities

2 CVEs affecting Veritas Aptare It Analytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28818, published 2023-03-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-36161, published 2021-01-06. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a…
CVE-2023-28818, published 2023-03-24. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing…