Approved changes feed: RSS · Atom

cpe:2.3:a:nakivo:backup_\&_replication_director:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNakivo (37345897-e6e7-5589-b9ac-211bc6e4ff84)
ProductBackup & Replication Director (f5d68a19-7c40-58e0-af7e-2b1d46dbfd64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32406 vulnerable 2026-06-08 07:18:59.718866 Details available
HIGH (8.6)
An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response.
Published: 2025-04-08T00:00:00.000Z
Updated: 2025-04-08T18:07:34.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48248 vulnerable 2026-06-08 06:48:13.698875 Details available
HIGH (8.6)
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Published: 2025-03-04T00:00:00.000Z
Updated: 2025-10-21T22:55:28.559Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.