Browse CVEs

CRITICAL 9.8 CVE-2025-34392EPSS 25% Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlle… Rmm 2025.1.1+ Fix from $2,3002025-12-10 CRITICAL 9.8 CVE-2025-34393 Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-contro… Rmm 2025.1.1+ Fix from $2,3002025-12-10 CRITICAL 9.8 CVE-2025-34394 Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently p… Rmm 2025.1.1+ Fix from $2,3002025-12-10 HIGH 7.5 CVE-2025-34395 Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthentica… Rmm 2025.1.1+ Fix from $1,9502025-12-10 MEDIUM 6.1 CVE-2025-8319 the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter Message Archiver Firmware No fix yet Fix from $1,6002025-07-30 CRITICAL 9.8 CVE-2023-7102EPSS 44% Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue… Email Security Gateway 300 Firmware after 9.2.1.001 Fix from $2,3002023-12-24 CRITICAL 9.8 CVE-2023-2868 KEVEPSS 87% A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3… Email Security Gateway 300 Firmware after 9.2.0.006 Fix from $2,3002023-05-24 HIGH 7.2 CVE-2023-26213EPSS 8% On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /aj… T100b Firmware No fix yet Fix from $1,9502023-03-03 HIGH 7.8 CVE-2021-42711 Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM pri… Network Access Client 5.2.2+ Fix from $1,9502021-12-01 MEDIUM 6.5 CVE-2019-5648 Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configur… Load Balancer Adc Firmware after 6.4 Fix from $1,6002020-03-12 CRITICAL 9.8 CVE-2014-2595EPSS 17% Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token ob… Web Application Firewall No fix yet Fix from $2,3002020-02-12 HIGH 7.8 CVE-2019-6724 The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can al… Vpn Client 5.0.2.7+ Fix from $1,9502019-03-21 MEDIUM 6.1 CVE-2018-20369 Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi modu… Message Archiver No fix yet Fix from $1,6002018-12-23 CRITICAL 9.8 CVE-2014-8426 Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015. Load Balancer No fix yet Fix from $2,3002017-08-28 CRITICAL 9.8 CVE-2014-8428 Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key. Load Balancer No fix yet Fix from $2,3002017-08-28 HIGH 8.8 CVE-2017-6320EPSS 11% A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (201… Load Balancer Adc after 6.0.1.006 Fix from $1,9502017-07-18