Symantec Veritas Backup Exec vulnerabilities

3 CVEs affecting Symantec Veritas Backup Exec, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3027, published 2009-12-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3027, published 2009-12-11. High severity, CVSS 10.0. EPSS: 10.6% chance of exploitation in the next 30 days. VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA through 6.5.5; Veritas Backup Reporter (VBR)…
CVE-2007-3509, published 2007-07-12. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute…
CVE-2007-5126, published 2007-09-27. High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by…