Approved changes feed: RSS · Atom

cpe:2.3:a:emc:avamar_server:7.3.0-233:*:*:*:*:*:*:*

part: a version: 7.3.0-233 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductAvamar Server (b8e6e4c1-699c-5164-bbab-03f50e0da763)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-4990 vulnerable 2026-06-08 05:09:38.932382 Details available
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system maintenance page to load a maliciously crafted file to any directory which could allow the attacker to execute arbitrary code on the Avamar Server system.
Published: 2017-06-21T20:00:00.000Z
Updated: 2024-08-05T14:47:43.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-4989 vulnerable 2026-06-08 05:09:38.930836 Details available
In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information, perform software updates, or run maintenance workflows.
Published: 2017-06-21T20:00:00.000Z
Updated: 2024-08-05T14:47:44.030Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.