[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMA-7IjVLohRGmKsQONNCuC3Y1LdkAa16Gy4_UjIRmNE":3,"g5a-risk:CVE-2023-28818":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":49,"references":50,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":73,"cisaInfo":26,"otxData":26,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":113,"notableEvents":114},"CVE-2023-28818","What is CVE-2023-28818?","An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could install rogue Collector executable files (aptare.jar or upgrademanager.zip) on the Portal server, which might then be downloaded and installed on collectors.","An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited a...","2023-03-24T04:15:56.393","2025-02-19T22:15:16.973",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"cve@mitre.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00168,[33,33,33,33,33,33,33],"Medium",[37,42,46],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"veritas","aptare_it_analytics","*","cpe:2.3:a:veritas:aptare_it_analytics:*:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":44,"criteria":45,"vulnerable":4},"netbackup_it_analytics","11.0.00","cpe:2.3:a:veritas:netbackup_it_analytics:11.0.00:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":47,"criteria":48,"vulnerable":4},"11.1.00","cpe:2.3:a:veritas:netbackup_it_analytics:11.1.00:*:*:*:*:*:*:*",3,[51,56],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS23-002","Veritas",[55],"Vendor Advisory",{"url":52,"source":53,"tags":57},[55],2,[60,68],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",{"id":69,"name":70,"description":71,"extendedDescription":72,"status":65,"abstraction":66,"structure":67},"CWE-494","Download of Code Without Integrity Check","The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.","An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2023-28818? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28818, a medium severity cyber security vulnerability from 2023. An issue was discovered in Veritas NetBackup IT Analytics...","CVE-2023-28818, CVE-2023-28818 vulnerability, CVE-2023-28818 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, veritas security, aptare_it_analytics vulnerability, netbackup_it_analytics vulnerability","\u002Fwhat-is\u002Fcve-2023-28818",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28818","Cybersecurity","CVE-2023-28818, CVE-2023-28818 vulnerability, CVE-2023-28818 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":26,"Negate":26,"Nodes":102},[103],{"Operator":104,"Negate":26,"CPEMatch":105},"OR",[106,109,111],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":108,"VersionEndIncluding":26},"0740098E-CE7C-4AC6-BC8F-A51F046ABFA7","10.6.00",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5BD01BD6-54A5-4F81-81E2-81D65BC7428D",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"85A3FBC4-5341-4928-9B29-8A8A0891B9F7",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792255374560,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},21,"Low","Monitor","2026-10-16T06:57:32.534833+00:00"]