Veritas Backup Exec — known CVE vulnerabilities

Every CVE whose affected-product data names Veritas Backup Exec, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2017-8895 — CVSS 9.8 (critical): In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free…
• CVE-2020-36167 — CVSS 9.3 (critical): An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On…
• CVE-2021-27878 — CVSS 8.8 (high) — actively exploited: An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful…
• CVE-2021-27877 — CVSS 8.2 (high) — actively exploited: An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of…
• CVE-2021-27876 — CVSS 8.1 (high) — actively exploited: An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful…
• CVE-2024-33673 — CVSS 7.8 (high): An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows…
• CVE-2024-33671 — CVSS 7.7 (high): An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can…
• CVE-2005-0772 — CVSS 7.5 (high): VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a…