Barracuda

Records18All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Barracuda records in CISA KEV

TI-2023-02687 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability CRITICAL 100KEV 2023-05-26

Components

Products in the NVD configurations · select one to filter the records

Rmm 4 records HIGH Email Security Gateway 300 Firmware 2 records CRITICAL Email Security Gateway 400 Firmware 2 records CRITICAL Email Security Gateway 600 Firmware 2 records CRITICAL Email Security Gateway 800 Firmware 2 records CRITICAL Email Security Gateway 900 Firmware 2 records CRITICAL Load Balancer 2 records MEDIUM Web Filter 2 records LOW

Records

2 records in Web Filter · all components

TI-2015-00881 CVE-2015-0962 · GHSA-v4xh-6ch6-4fr8

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses…

LOW 23

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attack…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01408 Published 2015-05-25 No fix listed CWE-18

TI-2015-00880 CVE-2015-0961 · GHSA-xwgw-cx39-c2gx

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify…

LOW 21

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00752 Published 2015-05-25 No fix listed

Open these records in search →

Critical	8
High	5
Medium	5
Low	0
No CVSS	0