Browse CVEs

CRITICAL 9.8 CVE-2020-8427 In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authenticatio… Backup 10.4.1+ Fix from $2,3002020-02-17 CRITICAL 9.8 CVE-2018-6329EPSS 62% It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote a… Backup 10.1.10+ Fix from $2,3002018-03-14 HIGH 8.8 CVE-2017-7283 An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /a… Enterprise Backup after 9.1.1 Fix from $1,9502017-04-20 MEDIUM 5.5 CVE-2017-7282 An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filena… Enterprise Backup after 9.1 Fix from $1,6002017-04-20 CRITICAL 9.8 CVE-2017-7279 An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issue… Enterprise Backup after 8.2.0-8 Fix from $2,3002017-04-12 CRITICAL 9.8 CVE-2017-7280EPSS 6% An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sen… Enterprise Backup after 8.2.0-8 Fix from $2,3002017-04-12 HIGH 8.8 CVE-2017-7281 An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport func… Enterprise Backup after 9.1.1 Fix from $1,9502017-04-12 HIGH 8.8 CVE-2017-7284 An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change the passw… Enterprise Backup after 9.1.1 Fix from $1,9502017-04-12 HIGH 7.5 CVE-2014-3139 recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to … Enterprise Backup No fix yet Fix from $1,9502014-05-02 HIGH 10.0 CVE-2014-3008EPSS 7% Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to r… Enterprise Backup Mitigation only Fix from $1,9502014-04-28