VMware vSphere Data Protection (VDP) 5.5.6
Approved changes feed: RSS · Atom
cpe:2.3:a:vmware:vsphere_data_protection:5.5.6:*:*:*:*:*:*:*
part: a version: 5.5.6 update: *
| Vendor | Vmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e) |
|---|---|
| Product | Vsphere Data Protection (f348bc16-8f35-57b9-b4cf-924b5e7a57fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-4917 |
vulnerable | 2026-06-08 05:09:38.450559 |
Details available
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
Published: 2017-06-07T17:00:00.000Z
Updated: 2024-08-05T14:47:42.912Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-4914 |
vulnerable | 2026-06-08 05:09:38.437932 |
Details available
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
Published: 2017-06-07T17:00:00.000Z
Updated: 2024-08-05T14:47:43.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7456 |
vulnerable | 2026-06-08 05:08:12.669599 |
Details available
VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T01:57:47.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4632 |
vulnerable | 2026-06-08 05:05:45.314473 |
Details available
VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoof servers, and bypass intended backup and restore access restrictions, via a crafted certificate.
Published: 2015-02-01T02:00:00.000Z
Updated: 2024-08-06T11:20:26.670Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.