Vulnerabilities

TI-2020-17716 CVE-2020-29495 · GHSA-q9fj-r59w-qgwr

Path traversal in Dell Avamar

MEDIUM 52

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.06422 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22

TI-2020-17715 CVE-2020-29494 · GHSA-xjxp-x9rc-crcf

MEDIUM 41

Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01701 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-22

TI-2020-17714 CVE-2020-29493 · GHSA-xmm8-v82g-957c

MEDIUM 48

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02724 Published 2021-01-14 Fixed in HF 19.1, 19.2 +1 CWE-89