Bacula vulnerabilities

Products

• Bacula 4
• Bacula-web 3

Newest

• bacula bacula-web Bacula-web SQL Injection Vulnerability CVE-2025-45346 Public exploitFix available 8.1 HighJuly 29, 2025
• bacula bacula-web Bacula-web SQL Injection Vulnerabilities CVE-2017-15367 Public exploitFix available EPSS 23.1% 9.8 CriticalMarch 7, 2018
• bacula bacula-web SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to... CVE-2014-8295 Public exploit 7.5 HighOctober 15, 2014
• bacula, debian linux +1 more The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce... CVE-2012-4430 Fix available 4.0 MediumOctober 8, 2012
• bacula mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files... CVE-2008-5373 Fix available 6.9 MediumDecember 8, 2008
• bacula make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command... CVE-2007-5626 Fix available 5.5 MediumOctober 23, 2007
• bacula bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink... CVE-2005-2995 Fix available 3.6 LowSeptember 20, 2005