Backup Exec

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVeritas (cb1a4886-9e3d-5084-9dc0-dbd7648341f5)
ProductBackup Exec (df20d1ab-6d36-5ab9-b676-807a06758a1b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33673 vulnerable 2026-06-08 06:37:31.954345 Details available
HIGH (7.8)
An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path.
Published: 2024-04-26T00:00:00.000Z
Updated: 2024-08-21T20:34:56.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33671 vulnerable 2026-06-08 06:37:31.949139 Details available
HIGH (7.7)
An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files.
Published: 2024-04-26T00:00:00.000Z
Updated: 2024-08-27T15:49:52.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27878 vulnerable 2026-06-08 05:31:22.673828 Details available
HIGH (8.8)
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. The attacker could use one of these commands to execute an arbitrary command on the system using system privileges.
Published: 2021-03-01T21:49:24.000Z
Updated: 2025-10-21T23:25:53.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27877 vulnerable 2026-06-08 05:31:22.673290 Details available
HIGH (8.2)
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.
Published: 2021-03-01T21:49:36.000Z
Updated: 2025-10-21T23:25:53.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27876 vulnerable 2026-06-08 05:31:22.672581 Details available
HIGH (8.1)
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. By using crafted input parameters in one of these commands, an attacker can access an arbitrary file on the system using System privileges.
Published: 2021-03-01T21:49:06.000Z
Updated: 2025-10-21T23:25:53.626Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36167 vulnerable 2026-06-08 05:25:02.521366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8895 vulnerable 2026-06-08 05:10:09.061494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.