Known exploited vulnerabilities
Veritas vulnerabilities attackers have used
Every Veritas vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 3 Veritas vulnerabilities as exploited in the wild, 0 of them added in the last 12 months and 3 used in ransomware campaigns. The most recent is CVE-2021-27878, added Apr 7, 2023. Backup Exec Agent has the most entries (3).
- In KEV, all time
- 3
- Added, last 12 months
- 0
- Used in ransomware
- 3
- New CVEs this week
- 0
Every Veritas entry in CISA KEV
Veritas Backup Exec Agent Command Execution Vulnerability
Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.
Veritas Backup Exec Agent Improper Authentication Vulnerability
Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.
Veritas Backup Exec Agent File Access Vulnerability
Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.