Read the docs

Avamar Virtual Edition

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Avamar Virtual Edition records in CISA KEV

No Avamar Virtual Edition vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in 6.0.402 · all components

Priority LOW 29

EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03337 Published 2014-10-25 No fix listed CWE-264
Open these records in search →