Description

An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response.

Related CPE's

Could not find any relations

References

https://helpcenter.nakivo.com/Knowledge-Base/Content/Security-Advisory/CVE-2025-32406.htm

Weaknesses

[email protected]

Secondary
CWE-611

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

8.6 · High

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2025-04-08T15:15:50.677Z

1 year ago

Last modified

2026-06-17T09:11:57.100Z

2 months ago