← Back

Urbackup Server

urbackup_server

Vendor: Urbackup • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-47102
1Urbackup
1Urbackup Server
Jun 17, 2026
Nov 7, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.
CVE-2017-16950
1Urbackup
1Urbackup Server
May 13, 2026
Dec 17, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter.