Veritas vulnerabilities4 known to be exploited.
Veritas has 135 published vulnerabilities across 40 products in our catalogue. 4 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Netbackup, with 66. If you run Veritas software, patch the exploited flaws first.
The most recent Veritas flaw added to the known-exploited list is CVE-2021-27878, on 7 April 2023. We keep watching the known-exploited list.
Which Veritas products have the most vulnerabilities?
Netbackup leads with 66 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Veritas vulnerabilities are being exploited?
4 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Veritas Backup Exec Agent Command Execution Vulnerability
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
- 8.2Veritas Backup Exec Agent Improper Authentication Vulnerability
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
- 8.1Veritas Backup Exec Agent File Access Vulnerability
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
- 9.8Spring Framework JDK 9+ Remote Code Execution Vulnerability
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Which Veritas flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
- 71%CVE-2017-8895Critical
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote...
- 65%
An issue was discovered in Veritas Backup Exec before 21.2.
- 36%CVE-2005-0772High
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL...
- 27%CVE-2017-6403Critical
An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.
- 24%
An issue was discovered in Veritas Backup Exec before 21.2.
- 14%
An issue was discovered in Veritas Backup Exec before 21.2.
- 11%CVE-2006-0991High
Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd...
- 9.9%CVE-2004-1389Medium
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and...
- 8.1%CVE-2006-0990Critical
Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code...
All Veritas products we track.
35 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Netbackupnetbackup66 vulnerabilities46 versions
- Netbackup Appliancenetbackup_appliance42 vulnerabilities32 versions
- Flex Applianceflex_appliance19 vulnerabilities6 versions
- Enterprise Vaultenterprise_vault17 vulnerabilities45 versions
- Flex Scaleflex_scale17 vulnerabilities2 versions
- Aptareaptare6 vulnerabilities2 versions
- Backup Execbackup_exec6 vulnerabilities15 versions
- Infoscale Operations Managerinfoscale_operations_manager6 vulnerabilities52 versions
- Netbackup Flex Scale Appliancenetbackup_flex_scale_appliance6 vulnerabilities2 versions
- Access Applianceaccess_appliance5 vulnerabilities4 versions
- Resiliency Platformresiliency_platform5 vulnerabilities12 versions
- Accessaccess4 vulnerabilities2 versions
- System Recoverysystem_recovery4 vulnerabilities11 versions
- Desktop and Laptop Optiondesktop_and_laptop_option3 vulnerabilities10 versions
- Aptare IT Analyticsaptare_it_analytics2 vulnerabilities3 versions
- Infoscaleinfoscale2 vulnerabilities9 versions
- Netbackup Appliance Firmwarenetbackup_appliance_firmware2 vulnerabilities13 versions
- Opscenteropscenter2 vulnerabilities1 version
- Cloudpointcloudpoint1 vulnerability11 versions
- Cluster Servercluster_server1 vulnerability2 versions
- Data Insightdata_insight1 vulnerability24 versions
- Netbackup Cloudpointnetbackup_cloudpoint1 vulnerability2 versions
- Netbackup IT Analyticsnetbackup_it_analytics1 vulnerability3 versions
- Netbackup Opscenternetbackup_opscenter1 vulnerability1 version
This directory lists the 35 Veritas products with at least one tracked version, of 40 in our catalogue.
Running Veritas? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
- Matched to
- Backup Exec on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 135 published vulnerabilities across 40 products and 338 versions from Veritas. The most recent Veritas flaw added to the known-exploited list is CVE-2021-27878, on 7 April 2023.
4 Veritas vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2021-27878, CVE-2021-27877 and CVE-2021-27876. The full list is on this page.
Netbackup, with 66 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Veritas products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.