CVE-2016-7399

In Veritas NetBackup Appliance versions 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x, a vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense.

An attacker can exploit this vulnerability to execute code remotely, potentially leading to system compromise and exposure of sensitive data.

It is recommended to update Veritas NetBackup Appliance to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.