RCE in Opentext™ Carbonite Safe Server Backup
CVE-2025-9120
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8.3.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.002 (5.4th percentile) — read the EPSS interpretation.
Affected products
- Opentext™ Carbonite Safe Server Backup — versions 0