What’s Vulnerable › Vulnerabilities

CVE-2018-18652

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-25 · updated 2026-06-17

Description

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.

Affected products

• Veritas Netbackup Appliance: before 3.1.2 — fixed in 3.1.2

How to fix

Upgrade to a fixed version: Veritas Netbackup Appliance 3.1.2. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/105737
• https://www.veritas.com/content/support/en_US/security/VTS18-003.html
• http://www.securityfocus.com/bid/105737
• https://www.veritas.com/content/support/en_US/security/VTS18-003.html

Get alerted when CVE-2018-18652 or the next vulnerability affects your stack