8.6
High
CVE-2025-9120 Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows…
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Carbonite Safe Server Backup 6.8 | earliest → 6.8.3 | No fix stated |