SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2004-1389

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute…

MEDIUM 6.0EPSS 9.86%

Does this matter?

Lower severity and a low EPSS score (9.86%). Track it; it rarely justifies an emergency change on its own.

Description

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.

CVSS 2.0
6.0 MEDIUMAV:L/AC:H/Au:S/C:C/I:C/A:C
EPSS
9.86% probability · 95th percentile
CISA KEV
Not listed
Affected
veritas/netbackup
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.