Symantec Backup Exec — known CVE vulnerabilities

Every CVE whose affected-product data names Symantec Backup Exec, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2013-4575 — CVSS 7.9 (high): Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2…
• CVE-2011-0546 — CVSS 6.5 (medium): Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the…
• CVE-2013-4676 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote…
• CVE-2013-4677 — CVSS 4.3 (medium): Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup…
• CVE-2013-4678 — CVSS 2.7 (low): The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users…