Products: 2
    Vulnerabilities: 7
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-45346

    SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

    Last Modified: Aug 06, 2025
    Published: Jul 29, 2025

    CVE-2017-15367

    Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.

    Last Modified: Nov 21, 2024
    Published: Mar 07, 2018

    CVE-2014-8295

    SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter.

    Last Modified: Apr 12, 2025
    Published: Oct 15, 2014

    CVE-2012-4430

    bacula: Improper ACL rules enforcement by dumping resources

    Last Modified: Apr 11, 2025
    Published: Sep 13, 2012

    CVE-2008-5373

    bacula-common: Insecure temporary file use in autochangers (symlink attack)

    Last Modified: Apr 23, 2026
    Published: Aug 11, 2008
    Items Per Page
    Bacula Vulnerabilities & Security CVEs | CVE-DB