Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2013-4678

The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors.

  • Published: Aug 5, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-4678
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.7
  • AV:A/AC:L/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
symantec / backup_exec 2010 2010.x
symantec / backup_exec 2010_r3-sp2 2010_r3-sp2.x
symantec / backup_exec 2010_r3-sp1 2010_r3-sp1.x
symantec / backup_exec 2012-sp1 2012-sp1.x
symantec / backup_exec 2012 2012.x