Threat database

Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks.

EPSS 0.6%VulnerabilityVeritas#cwe-89Germany+5

CVE-2021-27876 is a high-severity file access vulnerability in the Veritas Backup Exec Agent. It allows attackers to craft specific input parameters in a data management protocol command to access files on the Backup Exec Agent machine. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.

CVE-2021-27877 is an improper authentication vulnerability in the Veritas Backup Exec Agent. It allows unauthorized attackers to gain access to the Backup Exec Agent by exploiting weaknesses in the SHA authentication scheme. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.

CVE-2021-27878 is a command execution vulnerability in the Veritas Backup Exec Agent. It allows an attacker to execute arbitrary commands on the Backup Exec Agent machine by leveraging a data management protocol command. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. The vulnerability is rated as high severity due to its potential impact on system control.