Nimesa Backup and Recovery OS Command Injection Vulnerability
Vulnerability
A command injection vulnerability has been identified in Nimesa Backup and Recovery versions 2.3 and 2.4. This vulnerability allows the execution of arbitrary operating system commands on the server where the application is running.
Impact
Exploitation of this vulnerability could lead to the execution of arbitrary OS commands on the affected server.
Remediation
Users are advised to update Nimesa Backup and Recovery to the latest version. The latest version can be found on the AWS Marketplace.
Added: Jul 7, 2025, 5:22 AM
Updated: Jul 7, 2025, 5:22 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.