Symantec Backupexec System Recovery — known CVE vulnerabilities

Every CVE whose affected-product data names Symantec Backupexec System Recovery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2008-0457 — CVSS 10.0 (critical): Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec…
• CVE-2007-4347 — CVSS 7.8 (high): Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170…
• CVE-2007-2359 — CVSS 7.2 (high): Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec…
• CVE-2007-2360 — CVSS 6.8 (medium): Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of…
• CVE-2007-4346 — CVSS 5.0 (medium): The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote…
• CVE-2008-2512 — CVSS 5.0 (medium): Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote…
• CVE-2007-2361 — CVSS 4.9 (medium): Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of…
• CVE-2012-0305 — CVSS 4.4 (medium): Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows…