{"id":"CVE-2022-36954","aliases":["EUVD-2022-39611","GHSA-p289-v2gf-9g82"],"status":"published","title":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may...","description":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00974,"percentile":0.62486,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-07-27T20:58:39Z","modified":"2026-06-17T04:54:20Z","products":[{"vendor":"veritas","product":"netbackup"}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS22-009#Issue1","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36954"},{"url":"https://github.com/advisories/GHSA-p289-v2gf-9g82"}],"sources":{"cve":[{"id":"CVE-2022-36954","description":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.","status":"published","published":"2022-07-27T20:58:39Z","modified":"2024-08-03T10:21:32.231Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39611","description":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.","status":"published","published":"2022-07-27T20:58:39Z","modified":"2024-08-03T10:21:32Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N","level":"critical"}],"updated_at":"2026-11-03T03:25:24.099928Z"}],"ghsa":[{"id":"GHSA-p289-v2gf-9g82","title":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may...","description":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.","status":"published","published":"2022-07-28T00:00:40Z","modified":"2023-01-27T05:06:39Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T14:42:57.782632Z"}],"nvd":[{"id":"CVE-2022-36954","description":"In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.","status":"published","published":"2022-07-27T21:15:09.133Z","modified":"2026-06-17T04:54:20.737Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:24.037422Z"}]}}