NAKIVO

Records4All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

NAKIVO records in CISA KEV

TI-2024-32330 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability CRITICAL 96KEV 2025-03-19

Components

Products in the NVD configurations · select one to filter the records

Backup & Replication Director 2 records CRITICAL Backup & Replication Transporter 1 record MEDIUM

Records

2 records in Backup & Replication Director · all components

TI-2024-32330 CVE-2024-48248 · GHSA-8j8g-6gw9-rjrf

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for…

CRITICAL 96KEV

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.94356 Published 2025-03-04 Fixed in 11.0.0.88174 CWE-36

TI-2020-12473 CVE-2020-15850 · GHSA-3j3w-w8v5-3rch

Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on…

LOW 35

Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00522 Published 2020-09-24 No fix listed CWE-276

Open these records in search →

Critical	1
High	3
Medium	0
Low	0
No CVSS	0