VULNERABILITY INTELLIGENCE
CVE-2025-9120
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-02-24
Last modified2026-06-17
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects Carbonite Safe Server Backup: through 6.8.3.
Weakness classification
- security@opentext.com: CWE-94