[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQ4kiRCbyyYOm9gorjrRgYCAcu_EkDHVjOJEllsv5WVs":3,"g5a-risk:CVE-2022-36997":258},{"success":4,"data":5,"meta":256},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":125,"references":126,"referencesCount":133,"weaknesses":134,"weaknessesCount":133,"isActivelyExploited":143,"cisaInfo":26,"otxData":26,"relatedBlogPosts":144,"seoMetadata":145,"configurations":170,"relatedVendorCves":254,"notableEvents":255},"CVE-2022-36997","What is CVE-2022-36997?","An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read, Server-Side Request Forgery (SSRF), and denial of service.","An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related Net...","2022-07-28T01:15:18.207","2023-08-08T14:21:49.707",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":35},"cve@mitre.org","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",7.1,4.2,0.00721,[36,36,36,36,36,36,36],"High",[40,45,48,51,54,57,60,64,66,70,73,76,79,82,85,88,91,94,97,101,104,107,110,113,116,119,122],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"veritas","flex_appliance","1.2","cpe:2.3:a:veritas:flex_appliance:1.2:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"1.3","cpe:2.3:a:veritas:flex_appliance:1.3:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":49,"criteria":50,"vulnerable":4},"2.0","cpe:2.3:a:veritas:flex_appliance:2.0:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":52,"criteria":53,"vulnerable":4},"2.0.1","cpe:2.3:a:veritas:flex_appliance:2.0.1:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":55,"criteria":56,"vulnerable":4},"2.0.2","cpe:2.3:a:veritas:flex_appliance:2.0.2:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":58,"criteria":59,"vulnerable":4},"2.1","cpe:2.3:a:veritas:flex_appliance:2.1:*:*:*:*:*:*:*",{"vendor":41,"product":61,"version":62,"criteria":63,"vulnerable":4},"flex_scale","1.3.1","cpe:2.3:a:veritas:flex_scale:1.3.1:*:*:*:*:*:*:*",{"vendor":41,"product":61,"version":58,"criteria":65,"vulnerable":4},"cpe:2.3:a:veritas:flex_scale:2.1:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":68,"criteria":69,"vulnerable":4},"netbackup","8.1.1","cpe:2.3:a:veritas:netbackup:8.1.1:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":71,"criteria":72,"vulnerable":4},"8.1.2","cpe:2.3:a:veritas:netbackup:8.1.2:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":74,"criteria":75,"vulnerable":4},"8.2","cpe:2.3:a:veritas:netbackup:8.2:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":77,"criteria":78,"vulnerable":4},"8.3","cpe:2.3:a:veritas:netbackup:8.3:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":80,"criteria":81,"vulnerable":4},"8.3.0.1","cpe:2.3:a:veritas:netbackup:8.3.0.1:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":83,"criteria":84,"vulnerable":4},"8.3.0.2","cpe:2.3:a:veritas:netbackup:8.3.0.2:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":86,"criteria":87,"vulnerable":4},"9.0","cpe:2.3:a:veritas:netbackup:9.0:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":89,"criteria":90,"vulnerable":4},"9.0.0.1","cpe:2.3:a:veritas:netbackup:9.0.0.1:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":92,"criteria":93,"vulnerable":4},"9.1","cpe:2.3:a:veritas:netbackup:9.1:*:*:*:*:*:*:*",{"vendor":41,"product":67,"version":95,"criteria":96,"vulnerable":4},"9.1.0.1","cpe:2.3:a:veritas:netbackup:9.1.0.1:*:*:*:*:*:*:*",{"vendor":41,"product":98,"version":99,"criteria":100,"vulnerable":4},"netbackup_appliance","3.1.1","cpe:2.3:a:veritas:netbackup_appliance:3.1.1:*:*:*:*:*:*:*",{"vendor":41,"product":98,"version":102,"criteria":103,"vulnerable":4},"3.1.2","cpe:2.3:a:veritas:netbackup_appliance:3.1.2:*:*:*:*:*:*:*",{"vendor":41,"product":98,"version":105,"criteria":106,"vulnerable":4},"3.2","cpe:2.3:a:veritas:netbackup_appliance:3.2:*:*:*:*:*:*:*",{"vendor":41,"product":98,"version":108,"criteria":109,"vulnerable":4},"4.0","cpe:2.3:a:veritas:netbackup_appliance:4.0:*:*:*:*:*:*:*",{"vendor":41,"product":98,"version":111,"criteria":112,"vulnerable":4},"4.1","cpe:2.3:a:veritas:netbackup_appliance:4.1:*:*:*:*:*:*:*",{"vendor":41,"product":98,"version":114,"criteria":115,"vulnerable":4},"3.3.0.1","cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release1:*:*:*:*:*:*",{"vendor":41,"product":98,"version":117,"criteria":118,"vulnerable":4},"3.3.0.2","cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release1:*:*:*:*:*:*",{"vendor":41,"product":98,"version":120,"criteria":121,"vulnerable":4},"4.0.0.1","cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release1:*:*:*:*:*:*",{"vendor":41,"product":98,"version":123,"criteria":124,"vulnerable":4},"4.1.0.1","cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release1:*:*:*:*:*:*",27,[127],{"url":128,"source":129,"tags":130},"https:\u002F\u002Fwww.veritas.com\u002Fcontent\u002Fsupport\u002Fen_US\u002Fsecurity\u002FVTS22-004#h9","Veritas",[131,132],"Patch","Vendor Advisory",1,[135],{"id":136,"name":137,"description":138,"extendedDescription":139,"status":140,"abstraction":141,"structure":142},"CWE-918","Server-Side Request Forgery (SSRF)","The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","By providing URLs to unexpected hosts or ports, attackers can make it appear that the server is sending the request, possibly bypassing access controls such as firewalls that prevent the attackers from accessing the URLs directly. The server can be used as a proxy to conduct port scanning of hosts in internal networks, use other URLs such as that can access documents on the system (using file:\u002F\u002F), or use other protocols such as gopher:\u002F\u002F or tftp:\u002F\u002F, which may provide greater control over the contents of requests.","Incomplete","Base","Simple",false,[],{"title":146,"metaDescription":147,"keywords":148,"canonicalUrl":149,"structuredData":150},"What is CVE-2022-36997? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-36997, a high severity cyber security vulnerability from 2022. An issue was discovered in Veritas NetBackup 8.1.x through ...","CVE-2022-36997, CVE-2022-36997 vulnerability, CVE-2022-36997 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, veritas security, flex_appliance vulnerability, flex_scale vulnerability, netbackup vulnerability","\u002Fwhat-is\u002Fcve-2022-36997",{"@context":151,"@type":152,"headline":146,"description":147,"datePublished":10,"dateModified":11,"author":153,"publisher":157,"about":161,"mainEntityOfPage":165,"articleSection":168,"keywords":169},"https:\u002F\u002Fschema.org","TechArticle",{"@type":154,"name":155,"url":156},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":154,"name":155,"url":156,"logo":158},{"@type":159,"url":160},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":162,"name":6,"description":163,"additionalType":164},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":166,"@id":167},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-36997","Cybersecurity","CVE-2022-36997, CVE-2022-36997 vulnerability, CVE-2022-36997 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[171],{"Operator":26,"Negate":26,"Nodes":172},[173],{"Operator":174,"Negate":26,"CPEMatch":175},"OR",[176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,225,228,231,233,236,238,241,243,246,249,251],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":177,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"025BC427-C1D3-4888-8585-EE5EF288AE86",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E18698DE-9043-4AA0-B798-51C0B4CACBAD",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8CE9674B-4528-4168-B09A-DBAA48622307",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9810D40F-FF25-495F-80A4-7A8D8679FA33",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"02B3BC5A-97E2-4295-9EA3-62D29E579E9F",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EC18FEAF-65B4-4F56-A703-21DF9B969B0B",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0BDD5695-9235-4592-9B8A-A90BE7762F90",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"20EF9FB3-5862-4C85-A082-5903E9619A01",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"48682500-A4CC-417A-AE87-254A38E9A837",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F28926F3-D951-40EC-A383-27038FF62D9A",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3678D77D-D641-47C6-92BA-FE124D645F47",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A32EEA7C-4AE9-4E8A-89C5-7354DCE953A7",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"06FB11BA-21B8-4AF5-8E06-A03A148380A0",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F903AD8B-FCF5-4287-828C-AB19C69C00FB",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E3A9DC13-0464-4507-A5A2-91BEF7E55AA1",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":207,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0B23C8C3-3385-435D-861E-F1EEFD382C6F",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8797A64D-D4EA-45F4-911E-3F5794979FBB",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"26A3CE2C-544C-4785-B879-6C4E0A594FFE",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C5DFF0B8-7BA5-4BF0-B98A-BB833D3FA6A1",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"070A8292-8AA8-45B0-BD12-174071C142ED",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DA05618C-73DD-4A02-AF1B-90C5D968C881",{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5D33CB9E-3A08-4B80-8C3F-3D180C0F3E85",{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B8EDC739-0410-45C6-9628-EC833AC7400E",{"Vulnerable":4,"Criteria":223,"MatchCriteriaID":224,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release1:*:*:*:*:*:*","40BE7CD2-A828-4A21-B3EB-3BC4688C6D96",{"Vulnerable":4,"Criteria":226,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release2:*:*:*:*:*:*","0D532AFE-824C-4002-AD4E-431F83911D27",{"Vulnerable":4,"Criteria":229,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release3:*:*:*:*:*:*","C9CD8205-281F-4ABD-BF1D-EB97090B3755",{"Vulnerable":4,"Criteria":115,"MatchCriteriaID":232,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0DD01222-0F16-48D3-842A-C07377C0872F",{"Vulnerable":4,"Criteria":234,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release2:*:*:*:*:*:*","3ED514C2-AEDD-4071-A145-5D281C789703",{"Vulnerable":4,"Criteria":118,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BF2D4F61-2307-4A29-B620-E811E7642E66",{"Vulnerable":4,"Criteria":239,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release2:*:*:*:*:*:*","CF307131-DB9A-41CA-9990-EAAF56B671DB",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":242,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"42554066-06A0-44EF-8911-5982A4033E00",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release2:*:*:*:*:*:*","BE52F0C6-7AB6-4E84-9A8C-01C2AE170504",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release3:*:*:*:*:*:*","F2762443-9B5B-4675-84B3-21A60385F86E",{"Vulnerable":4,"Criteria":124,"MatchCriteriaID":250,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6256AE6A-34BF-417A-BAB9-8889457BA31B",{"Vulnerable":4,"Criteria":252,"MatchCriteriaID":253,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release2:*:*:*:*:*:*","FBEF9B41-F0AF-49A8-95A9-5F803E5AFDE0",[],[],{"lastModified":11,"cacheTime":257,"version":49},1793200340531,{"score":259,"band":260,"action":261,"scoredAt":262},47,"Medium","Plan remediation","2026-10-28T06:54:38.972147+00:00"]