CVE Watch—

CVE-2021-27876

Veritas Backup Exec Agent File Access Vulnerability

CVSS

—

No CVSS

EPSS

13.5%

p96

KEV

YES

Apr 7, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

13.5%EPSS · 30 days13.5%

2026-09-162026-10-14

KEV catalog record

Product

Veritas / Backup Exec Agent

Vulnerability

Veritas Backup Exec Agent File Access Vulnerability

Added to KEV

Apr 7, 2023

Remediate by

Apr 28, 2023

Known ransomware use

Yes

Summary description

Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.

Required action

Apply updates per vendor instructions.

Notes

https://www.veritas.com/support/en_US/security/VTS21-001; https://nvd.nist.gov/vuln/detail/CVE-2021-27876

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-27877—

99.2%

KEV—80Veritas Backup Exec Agent Improper Authentication Vulnerability—CVE-2021-27878—

97.8%

KEV—79Veritas Backup Exec Agent Command Execution Vulnerability—