Approved changes feed: RSS · Atom

cpe:2.3:a:bacula:bacula-web:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBacula (6d7623bb-b305-57e1-8540-bea1da774c35)
ProductBacula Web (c2563ea3-1151-5fb2-8f77-cae05337a6ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bacula-web/bacula-web purl2cpe 2026-06-01 10:18:13.629180
pkg:rpm/opensuse/bacula-web purl2cpe 2026-06-01 10:18:13.629183

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45346 vulnerable 2026-06-08 07:25:10.994012 Details available
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.
Published: 2025-07-29T00:00:00.000Z
Updated: 2025-07-29T20:04:18.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15367 vulnerable 2026-06-08 05:08:58.790197 Details available
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.
Published: 2018-03-07T20:00:00.000Z
Updated: 2024-08-05T19:57:25.611Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.