VULNERABILITY INTELLIGENCE

CVE-2018-18652

CVSS score7.2 HIGH

EPSS probability4.07%

CISA KEVNot currently listed

Published2018-10-25

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input.

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory