AS
Product
Avamar Server
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 2Low 0
Watch
Add Avamar Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-15548 | 9.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… Affected: 7.1-21; 7.1-145; 7.1-302; 7.1-370; 7.2-32; 7.2-309; +8 more |
| CVE-2017-4990 | 9.8 | Jun 21 | In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to… Affected: 7.3.0-226; 7.3.0-233; 7.3.1-125; 7.4.0-242; 7.4.1-58 |
| CVE-2017-4989 | 9.8 | Jun 21 | In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process… Affected: 7.2.0-401; 7.2.1-31; 7.2.1-32; 7.3.0-226; 7.3.0-233; 7.3.1-125 |
| CVE-2016-0903 | 9.1 | Sep 21 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients… Affected: through 7.3.0 |
| CVE-2017-15550 | 8.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… Affected: 7.1-21; 7.1-145; 7.1-302; 7.1-370; 7.2-32; 7.2-309; +8 more |
| CVE-2017-15549 | 8.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… Affected: 7.1-21; 7.1-145; 7.1-302; 7.1-370; 7.2-32; 7.2-309; +8 more |
| CVE-2016-0904 | 8.6 | Sep 21 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows… Affected: through 7.3.0 |
| CVE-2016-0920 | 7.8 | Sep 21 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is… Affected: through 7.3.0 |
| CVE-2016-0905 | 6.7 | Sep 21 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering… Affected: through 7.3.0 |
| CVE-2016-0921 | 6.5 | Sep 21 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified directories, which allows local users to obtain… Affected: through 7.3.0 |
| CVE-2015-4527 | – | Jul 23 | Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using… Affected: 7.1 |
| CVE-2013-3275 | – | Jul 19 | EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for… Affected: through 6.1; 4.0; 4.1; 5.0; 6.0 |
| CVE-2013-3274 | – | Jul 19 | EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which… Affected: through 6.1; 4.0; 4.1; 5.0; 6.0 |
Showing 13