Symantec Veritas Storage Foundation vulnerabilities

5 CVEs affecting Symantec Veritas Storage Foundation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0547, published 2011-08-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3703, published 2008-08-18. High severity, CVSS 10.0. EPSS: 12.2% chance of exploitation in the next 30 days. The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP…
CVE-2009-3027, published 2009-12-11. High severity, CVSS 10.0. EPSS: 10.6% chance of exploitation in the next 30 days. VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA through 6.5.5; Veritas Backup Reporter (VBR)…
CVE-2011-0547, published 2011-08-19. High severity, CVSS 10.0. EPSS: 6.6% chance of exploitation in the next 30 days. Multiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in Symantec Veritas Storage Foundation 5.1 and earlier, Veritas Storage Foundation Cluster File System (SFCFS)…
CVE-2008-0638, published 2008-02-21. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a…
CVE-2007-2279, published 2007-06-04. High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days. The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the…