Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Arcserve Unified Data Protection (UDP) — support.arcserve.com/s/article/Important-Security-Bulletin-… Clear all filters
TI-2025-24544 CVE-2025-34520 · GHSA-27qr-6rgm-2f59

Arcserve UDP < 10.2 Authentication Bypass

Priority LOW 36

An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows unauthenticated attackers to gain unauthorized access to protected functionality or user accounts.

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00369 Published 2025-08-27 Fixed in 10.2 CWE-288
TI-2025-24545 CVE-2025-34521 · GHSA-h6g8-8gr5-822r

Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS)

Priority LOW 21

A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the Arcserve Unified Data Protection (UDP), where unsanitized user input is improperly reflected in HTTP responses.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00217 Published 2025-08-27 Fixed in 10.2 CWE-79
TI-2025-24546 CVE-2025-34522 · GHSA-vvg7-q6v7-c4xg

Arcserve UDP < 10.2 Pre-Authentication Heap Overflow

Priority MEDIUM 42

A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP).

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00556 Published 2025-08-27 Fixed in 10.2 CWE-122
TI-2025-24547 CVE-2025-34523 · GHSA-5xjx-j6c2-6ghq

Arcserve UDP < 10.2 Pre-Authentication Heap Overflow

Priority MEDIUM 42

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection (UDP).

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0053 Published 2025-08-27 Fixed in 10.2 CWE-122