Bacula

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Bacula records in CISA KEV

No Bacula vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bacula 4 records LOW Bacula-web 3 records MEDIUM

Records

3 records in Bacula-web · all components

TI-2017-11280 CVE-2017-15367 · GHSA-fv4m-5j2c-787r

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that…

MEDIUM 62

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.23067 Published 2018-03-07 Fixed in 8.0.0-rc2 CWE-89

TI-2025-28765 CVE-2025-45346 · GHSA-hq25-vp56-qr86

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to…

LOW 39

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00881 Published 2025-07-29 Fixed in 9.7.1 CWE-89

TI-2014-06818 CVE-2014-8295 · GHSA-24xp-r7x6-gh85

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers…

LOW 37

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-10-15 No fix listed CWE-89

Open these records in search →

Critical	1
High	2
Medium	3
Low	1
No CVSS	0