[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQ4kiRCbyyYOm9gorjrRgYCAcu_EkDHVjOJEllsv5WVs":3,"g5a-risk:CVE-2022-36997":259},{"success":4,"data":5,"meta":257},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":39,"affectedProducts":40,"affectedProductsCount":126,"references":127,"referencesCount":134,"weaknesses":135,"weaknessesCount":134,"isActivelyExploited":144,"cisaInfo":26,"otxData":26,"relatedBlogPosts":145,"seoMetadata":146,"configurations":171,"relatedVendorCves":255,"notableEvents":256},"CVE-2022-36997","What is CVE-2022-36997?","An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.","An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related Net...","2022-07-28T01:15:18.207","2023-08-08T14:21:49.707",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":35},"cve@mitre.org","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",7.1,4.2,0.00721,[38,38,38,36,36,36,36],0.00701,"High",[41,46,49,52,55,58,61,65,67,71,74,77,80,83,86,89,92,95,98,102,105,108,111,114,117,120,123],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"veritas","flex_appliance","1.2","cpe:2.3:a:veritas:flex_appliance:1.2:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"1.3","cpe:2.3:a:veritas:flex_appliance:1.3:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":50,"criteria":51,"vulnerable":4},"2.0","cpe:2.3:a:veritas:flex_appliance:2.0:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":53,"criteria":54,"vulnerable":4},"2.0.1","cpe:2.3:a:veritas:flex_appliance:2.0.1:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":56,"criteria":57,"vulnerable":4},"2.0.2","cpe:2.3:a:veritas:flex_appliance:2.0.2:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":59,"criteria":60,"vulnerable":4},"2.1","cpe:2.3:a:veritas:flex_appliance:2.1:*:*:*:*:*:*:*",{"vendor":42,"product":62,"version":63,"criteria":64,"vulnerable":4},"flex_scale","1.3.1","cpe:2.3:a:veritas:flex_scale:1.3.1:*:*:*:*:*:*:*",{"vendor":42,"product":62,"version":59,"criteria":66,"vulnerable":4},"cpe:2.3:a:veritas:flex_scale:2.1:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":69,"criteria":70,"vulnerable":4},"netbackup","8.1.1","cpe:2.3:a:veritas:netbackup:8.1.1:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":72,"criteria":73,"vulnerable":4},"8.1.2","cpe:2.3:a:veritas:netbackup:8.1.2:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":75,"criteria":76,"vulnerable":4},"8.2","cpe:2.3:a:veritas:netbackup:8.2:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":78,"criteria":79,"vulnerable":4},"8.3","cpe:2.3:a:veritas:netbackup:8.3:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":81,"criteria":82,"vulnerable":4},"8.3.0.1","cpe:2.3:a:veritas:netbackup:8.3.0.1:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":84,"criteria":85,"vulnerable":4},"8.3.0.2","cpe:2.3:a:veritas:netbackup:8.3.0.2:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":87,"criteria":88,"vulnerable":4},"9.0","cpe:2.3:a:veritas:netbackup:9.0:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":90,"criteria":91,"vulnerable":4},"9.0.0.1","cpe:2.3:a:veritas:netbackup:9.0.0.1:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":93,"criteria":94,"vulnerable":4},"9.1","cpe:2.3:a:veritas:netbackup:9.1:*:*:*:*:*:*:*",{"vendor":42,"product":68,"version":96,"criteria":97,"vulnerable":4},"9.1.0.1","cpe:2.3:a:veritas:netbackup:9.1.0.1:*:*:*:*:*:*:*",{"vendor":42,"product":99,"version":100,"criteria":101,"vulnerable":4},"netbackup_appliance","3.1.1","cpe:2.3:a:veritas:netbackup_appliance:3.1.1:*:*:*:*:*:*:*",{"vendor":42,"product":99,"version":103,"criteria":104,"vulnerable":4},"3.1.2","cpe:2.3:a:veritas:netbackup_appliance:3.1.2:*:*:*:*:*:*:*",{"vendor":42,"product":99,"version":106,"criteria":107,"vulnerable":4},"3.2","cpe:2.3:a:veritas:netbackup_appliance:3.2:*:*:*:*:*:*:*",{"vendor":42,"product":99,"version":109,"criteria":110,"vulnerable":4},"4.0","cpe:2.3:a:veritas:netbackup_appliance:4.0:*:*:*:*:*:*:*",{"vendor":42,"product":99,"version":112,"criteria":113,"vulnerable":4},"4.1","cpe:2.3:a:veritas:netbackup_appliance:4.1:*:*:*:*:*:*:*",{"vendor":42,"product":99,"version":115,"criteria":116,"vulnerable":4},"3.3.0.1","cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release1:*:*:*:*:*:*",{"vendor":42,"product":99,"version":118,"criteria":119,"vulnerable":4},"3.3.0.2","cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release1:*:*:*:*:*:*",{"vendor":42,"product":99,"version":121,"criteria":122,"vulnerable":4},"4.0.0.1","cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release1:*:*:*:*:*:*",{"vendor":42,"product":99,"version":124,"criteria":125,"vulnerable":4},"4.1.0.1","cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release1:*:*:*:*:*:*",27,[128],{"url":129,"source":130,"tags":131},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS22-004#h9","Veritas",[132,133],"Patch","Vendor Advisory",1,[136],{"id":137,"name":138,"description":139,"extendedDescription":140,"status":141,"abstraction":142,"structure":143},"CWE-918","Server-Side Request Forgery (SSRF)","The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","By providing URLs to unexpected hosts or ports, attackers can make it appear that the server is sending the request, possibly bypassing access controls such as firewalls that prevent the attackers from accessing the URLs directly. The server can be used as a proxy to conduct port scanning of hosts in internal networks, use other URLs such as that can access documents on the system (using file:\u002F\u002F), or use other protocols such as gopher:\u002F\u002F or tftp:\u002F\u002F, which may provide greater control over the contents of requests.","Incomplete","Base","Simple",false,[],{"title":147,"metaDescription":148,"keywords":149,"canonicalUrl":150,"structuredData":151},"What is CVE-2022-36997? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-36997, a high severity cyber security vulnerability from 2022. An issue was discovered in Veritas NetBackup 8.1.x through ...","CVE-2022-36997, CVE-2022-36997 vulnerability, CVE-2022-36997 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, veritas security, flex_appliance vulnerability, flex_scale vulnerability, netbackup vulnerability","\u002Fwhat-is\u002Fcve-2022-36997",{"@context":152,"@type":153,"headline":147,"description":148,"datePublished":10,"dateModified":11,"author":154,"publisher":158,"about":162,"mainEntityOfPage":166,"articleSection":169,"keywords":170},"https:\u002F\u002Fschema.org","TechArticle",{"@type":155,"name":156,"url":157},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":155,"name":156,"url":157,"logo":159},{"@type":160,"url":161},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":163,"name":6,"description":164,"additionalType":165},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":167,"@id":168},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-36997","Cybersecurity","CVE-2022-36997, CVE-2022-36997 vulnerability, CVE-2022-36997 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[172],{"Operator":26,"Negate":26,"Nodes":173},[174],{"Operator":175,"Negate":26,"CPEMatch":176},"OR",[177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,226,229,232,234,237,239,242,244,247,250,252],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":178,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"025BC427-C1D3-4888-8585-EE5EF288AE86",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E18698DE-9043-4AA0-B798-51C0B4CACBAD",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":182,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8CE9674B-4528-4168-B09A-DBAA48622307",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":184,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9810D40F-FF25-495F-80A4-7A8D8679FA33",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"02B3BC5A-97E2-4295-9EA3-62D29E579E9F",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EC18FEAF-65B4-4F56-A703-21DF9B969B0B",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":190,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0BDD5695-9235-4592-9B8A-A90BE7762F90",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"20EF9FB3-5862-4C85-A082-5903E9619A01",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":194,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"48682500-A4CC-417A-AE87-254A38E9A837",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":196,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F28926F3-D951-40EC-A383-27038FF62D9A",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3678D77D-D641-47C6-92BA-FE124D645F47",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":200,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A32EEA7C-4AE9-4E8A-89C5-7354DCE953A7",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"06FB11BA-21B8-4AF5-8E06-A03A148380A0",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":204,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F903AD8B-FCF5-4287-828C-AB19C69C00FB",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":206,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E3A9DC13-0464-4507-A5A2-91BEF7E55AA1",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0B23C8C3-3385-435D-861E-F1EEFD382C6F",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":210,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8797A64D-D4EA-45F4-911E-3F5794979FBB",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":212,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"26A3CE2C-544C-4785-B879-6C4E0A594FFE",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":214,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C5DFF0B8-7BA5-4BF0-B98A-BB833D3FA6A1",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":216,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"070A8292-8AA8-45B0-BD12-174071C142ED",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":218,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DA05618C-73DD-4A02-AF1B-90C5D968C881",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":220,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5D33CB9E-3A08-4B80-8C3F-3D180C0F3E85",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":222,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B8EDC739-0410-45C6-9628-EC833AC7400E",{"Vulnerable":4,"Criteria":224,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release1:*:*:*:*:*:*","40BE7CD2-A828-4A21-B3EB-3BC4688C6D96",{"Vulnerable":4,"Criteria":227,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release2:*:*:*:*:*:*","0D532AFE-824C-4002-AD4E-431F83911D27",{"Vulnerable":4,"Criteria":230,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release3:*:*:*:*:*:*","C9CD8205-281F-4ABD-BF1D-EB97090B3755",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":233,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0DD01222-0F16-48D3-842A-C07377C0872F",{"Vulnerable":4,"Criteria":235,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release2:*:*:*:*:*:*","3ED514C2-AEDD-4071-A145-5D281C789703",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BF2D4F61-2307-4A29-B620-E811E7642E66",{"Vulnerable":4,"Criteria":240,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release2:*:*:*:*:*:*","CF307131-DB9A-41CA-9990-EAAF56B671DB",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"42554066-06A0-44EF-8911-5982A4033E00",{"Vulnerable":4,"Criteria":245,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release2:*:*:*:*:*:*","BE52F0C6-7AB6-4E84-9A8C-01C2AE170504",{"Vulnerable":4,"Criteria":248,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release3:*:*:*:*:*:*","F2762443-9B5B-4675-84B3-21A60385F86E",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":251,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6256AE6A-34BF-417A-BAB9-8889457BA31B",{"Vulnerable":4,"Criteria":253,"MatchCriteriaID":254,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release2:*:*:*:*:*:*","FBEF9B41-F0AF-49A8-95A9-5F803E5AFDE0",[],[],{"lastModified":11,"cacheTime":258,"version":50},1792347432294,{"score":260,"band":261,"action":262,"scoredAt":263},47,"Medium","Plan remediation","2026-10-16T06:55:14.57839+00:00"]