Skip to content

PatchFirst · Latest vulnerabilities

bacula-web/bacula-web vulnerabilities

Vulnerabilities published for bacula-web/bacula-web in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2025-45346
High · CVSS 8.1EPSS 0.88%Fix available
CVE-2025-45346
SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.
bacula-web/bacula-web PHP
- Update to 9.7.1
Published July 29, 2025Updated July 29, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2017-15367
Critical · CVSS 9.8EPSS 23.07%Public exploitFix available
CVE-2017-15367
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.
bacula-web/bacula-web PHP
- Update to 8.0.0-rc2
Published March 7, 2018Updated August 5, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →