Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Dell Component: Emc Avamar Server Clear all filters
TI-2021-14682 CVE-2021-36318 · GHSA-r96m-rq4f-96v2

Sensitive information in log files in Dell Avamar

Priority LOW 29

Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00238 Published 2021-12-21 Fixed in 18.2 19.1 19.2 19.3 19.4 CWE-532
TI-2021-14681 CVE-2021-36317 · GHSA-q7w8-7w4q-9j7c

Insufficiently protected credentials in Dell Avamar

Priority LOW 29

Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00231 Published 2021-12-21 No fix listed CWE-256
TI-2021-14680 CVE-2021-36316 · GHSA-wrmw-qgfp-5p47

Improper privilege management in Dell Avamar

Priority LOW 33

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00772 Published 2021-12-21 No fix listed CWE-269
TI-2020-04382 CVE-2020-5329 · GHSA-fpqr-6jch-4xhq

Open redirect in Dell Avamar

Priority LOW 29

Dell EMC Avamar Server contains an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00858 Published 2021-07-29 No fix listed CWE-601
TI-2020-04393 CVE-2020-5341 · GHSA-wqh9-gr2m-8m6v

Deserialization of untrusted data in Dell Avamar Virtual Edition

Priority MEDIUM 49

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contai…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04254 Published 2021-07-28 Fixed in Avamar 7.5 Virtual Edition for VMware vSphere only CWE-502
TI-2019-02769 CVE-2019-3752 · GHSA-pg28-353j-pr59

XML external entity injection in Dell Avamar

Priority LOW 38

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00977 Published 2021-07-16 No fix listed CWE-611
TI-2021-04602 CVE-2021-21511 · GHSA-2gr2-xjj5-q4ff

Improper authorization in Dell Avamar

Priority LOW 37

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01043 Published 2021-02-15 No fix listed CWE-285
TI-2020-17716 CVE-2020-29495 · GHSA-q9fj-r59w-qgwr

Path traversal in Dell Avamar

Priority MEDIUM 52

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.06422 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22
TI-2020-17715 CVE-2020-29494 · GHSA-xjxp-x9rc-crcf

Path traversal in Dell Avamar

Priority MEDIUM 41

Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01701 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22
TI-2020-17714 CVE-2020-29493 · GHSA-xmm8-v82g-957c

SQL injection in Dell Avamar

Priority MEDIUM 48

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02724 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-89
TI-2019-02780 CVE-2019-3765 · GHSA-234q-j3p6-pgvr

Incorrect permission assignment in Dell Avamar

Priority LOW 38

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Reso…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01135 Published 2019-10-09 No fix listed CWE-732