Vulnerability record · CVE-2004-1389 · published 31 December 2004

CVE-2004-1389: Veritas netbackup vulnerability

VVeritas · Netbackup

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.

6.0 CVSS 2.0 Medium EPSS 9.9% · top 4.6%

6.0CVSS 2.0 base score

9.9%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

12References

16 Jun 2026Last modified by NVD

Description

AV:L/AC:H/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

VNetbackup Veritas

References

Link	Tags
http://secunia.com/advisories/12901/	Vendor Advisory
http://seer.support.veritas.com/docs/271727.htm	PatchVendor Advisory
http://www.ciac.org/ciac/bulletins/p-020.shtml	PatchVendor Advisory
http://www.kb.cert.org/vuls/id/685456	PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/11494
https://exchange.xforce.ibmcloud.com/vulnerabilities/17811
http://secunia.com/advisories/12901/	Vendor Advisory
http://seer.support.veritas.com/docs/271727.htm	PatchVendor Advisory
http://www.ciac.org/ciac/bulletins/p-020.shtml	PatchVendor Advisory
http://www.kb.cert.org/vuls/id/685456	PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/11494
https://exchange.xforce.ibmcloud.com/vulnerabilities/17811

Track CVE-2004-1389 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-28222Veritas netbackup path traversal vulnerabilityIn Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenti…EPSS 0.99%7 Mar 2024 9.8CVE-2022-42307Veritas netbackup xml external entity (xxe) vulnerabilityAn issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML Exte…EPSS 0.56%3 Oct 2022 9.8CVE-2022-42303Veritas netbackup sql injection vulnerabilityAn issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order …EPSS 0.54%3 Oct 2022 9.8CVE-2022-42304Veritas netbackup sql injection vulnerabilityAn issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection…EPSS 0.54%3 Oct 2022 9.8CVE-2022-42302Veritas netbackup sql injection vulnerabilityAn issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection…EPSS 0.56%3 Oct 2022 9.8CVE-2022-36986Veritas flex appliance vulnerabilityAn issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and rel…EPSS 0.95%28 Jul 2022 9.8CVE-2022-36952Veritas netbackup hard-coded credentials vulnerabilityIn Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through …EPSS 0.51%27 Jul 2022 9.8CVE-2022-36950Veritas netbackup vulnerabilityIn Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classloader manipul…EPSS 1.8%27 Jul 2022

Source: NIST National Vulnerability Database (record CVE-2004-1389), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.