Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Arcserve UDP 9.2 Clear all filters
TI-2023-22381 CVE-2023-42000 · GHSA-4xpq-wqf9-p6mv

Arcserve UDP Agent Unauthenticated Path Traversal File Upload

Priority MEDIUM 45

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2023-11-27 Fixed in 9.2 CWE-22
TI-2023-22380 CVE-2023-41999 · GHSA-5mpg-rwcj-r8cj

Arcserve UDP Management Authentication Bypass

Priority MEDIUM 45

An authentication bypass exists in Arcserve UDP prior to version 9.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01438 Published 2023-11-27 Fixed in 9.2 CWE-287
TI-2023-22379 CVE-2023-41998 · GHSA-q5h6-hfv2-xr6w

Arcserve UDP Unauthenticated RCE

Priority MEDIUM 58

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15274 Published 2023-11-27 Fixed in 9.2 CWE-434