CVE-2022-42303: 
Veritas NetBackup Client vulnerability analysis and mitigation

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302 (NVD, Veritas Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 8.0 HIGH with vector (AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). This is a second-order SQL injection vulnerability that affects the NBFSMCLIENT service and requires first exploiting CVE-2022-42302 to be successful (Veritas Advisory).

A successful exploitation of this vulnerability could allow an attacker to achieve high levels of confidentiality, integrity, and availability impacts on the affected system. The vulnerability affects the NetBackup Primary server component (Veritas Advisory).

Veritas recommends upgrading NetBackup Primary & Media Servers to NetBackup 8.2, 8.3.0.1, 8.3.0.2, 9.0.0.1, 9.1.0.1, 10.0 and applying appropriate Hotfix OR upgrading to 10.0.0.1. For NetBackup Appliance, upgrade to 3.2, 3.3.0.1, 3.3.0.2, 4.0.0.1, 4.1.0.1, 5.0 and apply appropriate Hotfix OR upgrade to 5.0.0.1 MR1. NetBackup Clients are not impacted and require no action (Veritas Advisory).