AR
Vendor
Arcserve
25
CVEs
2
On KEV
0
New 30D
Products
UD9.8
Udp
Arcserve
16 CVEs1 on KEV0 new
UD9.8
Unified Data Protection (UDP)
Arcserve
5 CVEs1 on KEV0 new
AU–
Arcserve Unified Data Protection
Arcserve
1 CVEs0 on KEV0 new
BR–
Brightstor
Arcserve
1 CVEs0 on KEV0 new
D27.5
D2d
Arcserve
1 CVEs0 on KEV0 new
UC6.3
UDP Console
Arcserve
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40118 | UC UDP Console Arcserve | 6.3 | Apr 16 | UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability |
| CVE-2025-34520 | UD Unified Data Protection (UDP) Arcserve | 9.8 | Aug 27 | Arcserve UDP < 10.2 Authentication Bypass |
| CVE-2025-34521 | UD Unified Data Protection (UDP) Arcserve | 5.4 | Aug 27 | Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS) |
| CVE-2025-34522 | UD Unified Data Protection (UDP) Arcserve | 9.8 | Aug 27 | Arcserve UDP < 10.2 Pre-Authentication Heap Overflow |
| CVE-2025-34523 | UD Unified Data Protection (UDP) Arcserve | 9.8 | Aug 27 | Arcserve UDP < 10.2 Pre-Authentication Heap Overflow |
| CVE-2024-0801 | UD Udp Arcserve | 7.5 | Mar 13 | A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll |
| CVE-2024-0800 | UD Udp Arcserve | 8.8 | Mar 13 | A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet |
| CVE-2024-0799 | UD Udp Arcserve | 9.8 | Mar 13 | An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the… |
| CVE-2023-42000 | UD Udp Arcserve | 9.8 | Nov 27 | Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload() |
| CVE-2023-41999 | UD Udp Arcserve | 9.8 | Nov 27 | An authentication bypass exists in Arcserve UDP prior to version 9.2 |
| CVE-2023-41998 | UD Udp Arcserve | 9.8 | Nov 27 | Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface |
| CVE-2023-26258 | UD Udp Arcserve | 9.8 | Jul 3 | Arcserve UDP through 9.0.6034 allows authentication bypass |
| CVE-2020-27858 | D2 D2d Arcserve | 7.5 | Jan 20 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5 |
| CVE-2018-18660 | UD Udp Arcserve | 6.1 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2018-18659 | UD Udp Arcserve | 7.5 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2018-18658 | UD Udp Arcserve | 7.5 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2018-18657 | UD Udp Arcserve | 7.5 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2015-4069 | AU Arcserve Unified Data Protection Arcserve | – | May 29 | The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy… |
| CVE-2015-4068 In wildKEV | UD Udp Arcserve | 9.1 | May 29 | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability |
| CVE-2006-6641 | BR Brightstor Arcserve | – | Dec 20 | Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion… |