Backup Exec vulnerabilitiesAnd the versions its exploited flaws hit.
Backup Exec is made by Veritas. We track 6 published vulnerabilities in it, across 15 versions. 3 of them are on the list of flaws known to be exploited, the newest added on 7 April 2023. If you run Backup Exec, check your version against the exploited flaws below and patch those first.
The most recent Backup Exec flaw added to the known-exploited list is CVE-2021-27876, on 7 April 2023. We keep watching the known-exploited list.
Which versions of Backup Exec do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "before 21.2" means every version up to, but not including, 21.2. Find your version, then patch.
- CVE-2021-27876Exploited list, 7 Apr 2023
Veritas Backup Exec Agent File Access Vulnerability
before 21.2 - CVE-2021-27877Exploited list, 7 Apr 2023
Veritas Backup Exec Agent Improper Authentication Vulnerability
before 21.2 - CVE-2021-27878Exploited list, 7 Apr 2023
Veritas Backup Exec Agent Command Execution Vulnerability
before 21.2
Which Backup Exec vulnerabilities are being exploited?
3 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.1Veritas Backup Exec Agent File Access Vulnerability
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
- 8.2Veritas Backup Exec Agent Improper Authentication Vulnerability
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
- 8.8Veritas Backup Exec Agent Command Execution Vulnerability
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
Which Backup Exec flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 71%CVE-2017-8895Critical
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote...
- 65%
An issue was discovered in Veritas Backup Exec before 21.2.
- 36%CVE-2005-0772High
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL...
- 24%
An issue was discovered in Veritas Backup Exec before 21.2.
- 14%
An issue was discovered in Veritas Backup Exec before 21.2.
- 0.5%CVE-2020-36167High
An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517.
Running Backup Exec? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
- Matched to
- Backup Exec on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 6 published vulnerabilities listed under the name Backup Exec, across 15 versions. The most recent Backup Exec flaw added to the known-exploited list is CVE-2021-27876, on 7 April 2023.
3 are on the list of flaws known to be exploited. The most recently added are CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878.
Each flaw names its own versions, usually as ranges. The newest, CVE-2021-27876, affects before 21.2. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Backup Exec. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.