Vendors / Zmanda Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Zmanda records in CISA KEV No Zmanda vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00604 · Published 2019-12-01 · No fix listed CWE-352
Priority LOW 37
AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00484 · Published 2023-07-26 · Fix deferred CWE-88
Priority LOW 37
An issue was discovered in Amanda 3.3.1.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01283 · Published 2018-10-24 · Will not fix CWE-77
Priority LOW 35
An issue was discovered in Amanda 3.3.1.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00586 · Published 2018-10-24 · Will not fix CWE-264
Priority LOW 34
A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges.
CVSS 3.1 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.01257 · Published 2023-04-16 · Fix deferred CWE-88
Priority LOW 32
Amanda 3.5.1 allows privilege escalation from the regular user backup to root.
CVSS 3.1 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0053 · Published 2023-04-16 · Fix deferred CWE-77
Open these records in search → All records by CVSS severity
1 4 2 0 0
THREATIST.IORead the docs