AV
Product
Avamar
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Avamar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0906 | 8.8 | Jul 6 | The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read… Affected: through 7.2.1 |
| CVE-2014-4623 | – | Oct 25 | EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for… Affected: 6.0.1; 6.0.2; 6.0.3; 6.1; 6.1.101-87; 7.0; +1 more |
| CVE-2013-0945 | – | May 3 | EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… Affected: through 6.1.101-87; 4.0; 4.1; 5.0; 5.0; 5.0; +3 more |
| CVE-2013-0944 | – | May 3 | The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL Affected: 5.0; 5.0; 5.0; 5.0.0-407; 5.0.4-26; 6.0; +3 more |
| CVE-2012-2291 | – | Jan 21 | EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which… Affected: 4.0; 4.1; 5.0; 5.0; 5.0; 5.0.0-407; +2 more |
| CVE-2012-4610 | – | Oct 31 | EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging… Affected: 6.1 |
| CVE-2011-1740 | – | Sep 19 | EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging… Affected: 4.0; 4.1; 5.0; 5.0; 5.0; 5.0.0-407; +2 more |
| CVE-2011-0648 | – | Mar 16 | Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors Affected: through 5.0.4-26; 4.1; 5.0 |
| CVE-2011-0442 | – | Mar 16 | The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to… Affected: through 5.0.0-407; 5.0; 5.0 |
| CVE-2010-1919 | – | May 28 | Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP Affected: through 5.0; 4.1 |
Showing 10