Priority HIGH 67
VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.32789 · Published 2016-12-29 · No fix listed CWE-255
Priority MEDIUM 54
Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09906 · Published 2018-11-26 · No fix listed
Priority MEDIUM 53
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08833 · Published 2017-06-07 · No fix listed CWE-502
Priority MEDIUM 44
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00842 · Published 2017-06-07 · No fix listed CWE-327
Priority LOW 32
'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.01005 · Published 2018-11-26 · No fix listed CWE-78
Priority LOW 31
Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01811 · Published 2018-11-26 · No fix listed CWE-601
Priority LOW 30
Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability.
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00834 · Published 2018-11-26 · No fix listed
Priority LOW 21
VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly verify X.509 certificate…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0062 · Published 2015-02-01 · No fix listed CWE-310