CVE-2013-4678: Symantec Backup Exec

Low severity, CVSS 2.7. EPSS: 0.5% chance of exploitation in the next 30 days.

The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors.

Affected products

• Symantec Backup Exec: version 2010 only; version 2010_r3 only; version 2012 only

Published 2013-08-05. Last modified 2026-06-16.