Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

11 records in Emc Avamar Server · all components

TI-2020-17716 CVE-2020-29495 · GHSA-q9fj-r59w-qgwr

Path traversal in Dell Avamar

Priority MEDIUM 52

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.06422 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22
TI-2020-04393 CVE-2020-5341 · GHSA-wqh9-gr2m-8m6v

Deserialization of untrusted data in Dell Avamar Virtual Edition

Priority MEDIUM 49

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contai…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04254 Published 2021-07-28 Fixed in Avamar 7.5 Virtual Edition for VMware vSphere only CWE-502
TI-2020-17714 CVE-2020-29493 · GHSA-xmm8-v82g-957c

SQL injection in Dell Avamar

Priority MEDIUM 48

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02724 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-89
TI-2020-17715 CVE-2020-29494 · GHSA-xjxp-x9rc-crcf

Path traversal in Dell Avamar

Priority MEDIUM 41

Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01701 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22
TI-2019-02780 CVE-2019-3765 · GHSA-234q-j3p6-pgvr

Incorrect permission assignment in Dell Avamar

Priority LOW 38

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Reso…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01135 Published 2019-10-09 No fix listed CWE-732
TI-2019-02769 CVE-2019-3752 · GHSA-pg28-353j-pr59

XML external entity injection in Dell Avamar

Priority LOW 38

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00977 Published 2021-07-16 No fix listed CWE-611
TI-2021-04602 CVE-2021-21511 · GHSA-2gr2-xjj5-q4ff

Improper authorization in Dell Avamar

Priority LOW 37

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01043 Published 2021-02-15 No fix listed CWE-285
TI-2021-14680 CVE-2021-36316 · GHSA-wrmw-qgfp-5p47

Improper privilege management in Dell Avamar

Priority LOW 33

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00772 Published 2021-12-21 No fix listed CWE-269
TI-2021-14682 CVE-2021-36318 · GHSA-r96m-rq4f-96v2

Sensitive information in log files in Dell Avamar

Priority LOW 29

Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00238 Published 2021-12-21 Fixed in 18.2 19.1 19.2 19.3 19.4 CWE-532
TI-2021-14681 CVE-2021-36317 · GHSA-q7w8-7w4q-9j7c

Insufficiently protected credentials in Dell Avamar

Priority LOW 29

Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00231 Published 2021-12-21 No fix listed CWE-256
TI-2020-04382 CVE-2020-5329 · GHSA-fpqr-6jch-4xhq

Open redirect in Dell Avamar

Priority LOW 29

Dell EMC Avamar Server contains an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00858 Published 2021-07-29 No fix listed CWE-601
Open these records in search →