Quest NetVault Backup NVBUEventHistory Get Method SQL Injection (CVE-2017-17412)

1 year ago

An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoking the Get method of the NVBUEventHistory…Read More