Secure Backup

Vendor:

First CVE: Jan 14, 2009 · Active for 17 years

30
Total CVEs
More Total CVEs than 96% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
3.3%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Secure Backup over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 14, 2009
17 years ago
Most Recent CVE
Apr 15, 2025
465 days ago

CVE Severity & Scoring

Secure Backup30 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local1 (3.3%)
Network7 (23.3%)
Unknown22 (73.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (16.7%)
High3 (10.0%)
Unknown22 (73.3%)
User Interaction
None7 (23.3%)
Unknown22 (73.3%)
Required1 (3.3%)
Privileges Required
Low0 (0.0%)
High1 (3.3%)
None7 (23.3%)
Unknown22 (73.3%)

Top CVEs

Signals from CVEs in this product scope (30 CVEs).

30 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directori
Oct 7, 20219.899YESYES
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via
Jul 14, 200910.082NOYES
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via
Jan 14, 200910.079NOYES
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via
Jul 14, 20099.077NOYES
In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
Jun 10, 20219.869NONO
Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.
Jul 13, 20105.065NOYES
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via
Jan 14, 200910.061NOYES
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms
Mar 25, 20215.957NONO
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont
Aug 24, 20217.453NONO
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Se
Aug 16, 20217.550NONO

Exploit Exposure

Signals from CVEs in this product scope (30 CVEs).

CISA KEV
1 CVE
3.3% of CVEs· 97th percentile
Metasploit
6 CVEs
20.0% of CVEs· 97th percentile
Nuclei
1 CVE
3.3% of CVEs· 97th percentile
ExploitDB
5 CVEs
16.7% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (30 CVEs).

Media Mentions

Signals from CVEs in this product scope (30 CVEs).

Top CNAs Publishing CVEs For Secure Backup

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
18.1.0.216.70.2%00
18.1.0.1.026.826.3%00
18.1.0.116.70.2%00
18.1.0.016.70.2%00
12.1.0.316.70.2%00
12.1.0.216.70.2%00
12.1.0.116.70.2%00
10.3.0.337.02.3%00
10.3.0.216.41.5%00
10.3.0.158.613.1%01
10.2.0.339.747.8%02
10.2.0.277.116.2%02
10.1.0.3110.03.4%00
10.1.0.115.02.0%00