What’s Vulnerable › Vulnerabilities

CVE-2022-46414

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-04 · updated 2026-06-17
• Weakness: CWE-306

Description

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal.

Affected products

• Veritas Access Appliance: through 8.0.100
• Veritas Netbackup Flex Scale Appliance: through 3.0

References

• https://www.veritas.com/content/support/en_US/security/VTS22-019#issue1
• https://www.veritas.com/content/support/en_US/security/VTS22-019#issue1

Get alerted when CVE-2022-46414 or the next vulnerability affects your stack