GCVE - cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Avamar (`a7531d48-a2e5-509e-9dbe-30c301b7538d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-0906`	vulnerable	2026-06-08 05:07:16.506489	Details available The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation. Published: 2016-07-06T14:00:00.000Z Updated: 2024-08-05T22:38:40.979Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1036235 http://seclists.org/bugtraq/2016/Jul/33	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0945`	vulnerable	2026-06-08 05:03:51.314001	Details available EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Published: 2013-05-03T10:00:00.000Z Updated: 2024-09-17T00:50:49.519Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2013-05/0014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0648`	vulnerable	2026-06-08 04:56:38.482368	Details available Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors. Published: 2011-03-16T22:00:00.000Z Updated: 2024-08-06T21:58:26.023Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/8138 http://www.securityfocus.com/bid/46874 http://secunia.com/advisories/43749 http://osvdb.org/71181 https://exchange.xforce.ibmcloud.com/vulnerabilities/66108	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0442`	vulnerable	2026-06-08 04:56:37.137571	Details available The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network. Published: 2011-03-16T22:00:00.000Z Updated: 2024-08-06T21:51:09.053Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/66109 http://www.vupen.com/english/advisories/2011/0678 http://www.vupen.com/english/advisories/2011/0677 http://www.securityfocus.com/archive/1/517022/100/0/threaded http://secunia.com/advisories/43797	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1919`	vulnerable	2026-06-08 04:54:10.987206	Details available Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP. Published: 2010-05-28T18:00:00.000Z Updated: 2024-08-07T02:17:14.178Z Open on db.gcve.eu Reference links http://secunia.com/advisories/39919 http://www.packetstormsecurity.org/1005-advisories/ESA-2010-007.txt http://securitytracker.com/id?1024036 http://www.vupen.com/english/advisories/2010/1253 http://www.securityfocus.com/bid/40390	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.