GCVE - cpe:2.3:a:symantec:backup_exec:2012:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:backup_exec:2012:*:*:*:*:*:*:*

part: a version: 2012 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Backup Exec (`b98ff3c6-30e3-5572-958d-5b66a572f7fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4678`	vulnerable	2026-06-08 05:04:49.108227	Details available The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors. Published: 2013-08-04T20:00:00.000Z Updated: 2024-09-17T03:54:55.125Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://www.securityfocus.com/bid/61488	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4677`	vulnerable	2026-06-08 05:04:49.106520	Details available Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files. Published: 2013-08-04T20:00:00.000Z Updated: 2024-08-06T16:52:26.943Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://osvdb.org/95939 http://www.securityfocus.com/bid/61487	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4676`	vulnerable	2026-06-08 05:04:49.106064	Details available Multiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a (1) custom-reports generation page, (2) Storage Devices creation page, or (3) jobs creation page in the management console; or (4) a Backup Exec server-management page in the beutility console. Published: 2013-08-04T20:00:00.000Z Updated: 2024-08-06T16:52:27.149Z Open on db.gcve.eu Reference links http://osvdb.org/95942 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://www.securityfocus.com/bid/61486 http://osvdb.org/95941	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4575`	vulnerable	2026-06-08 05:04:48.301393	Details available Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via unspecified vectors. Published: 2013-08-04T20:00:00.000Z Updated: 2024-08-06T16:45:15.191Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://osvdb.org/95938 http://www.securityfocus.com/bid/61485	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.