Avid Nexis Pro+
Approved changes feed: RSS · Atom
cpe:2.3:a:avid:avid_nexis_pro+:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Avid (3a3fdbbe-d23a-5209-8bc3-4e9ce24bc2a7) |
|---|---|
| Product | Avid Nexis Pro+ (71e72660-7c09-54df-8c78-7f8036ae2e10) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-26293 |
vulnerable | 2026-06-08 06:31:26.266662 |
Unauthenticated Path Traversal affecting Avid NEXIS
The Avid Nexis Agent uses a vulnerable gSOAP
version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability.
This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Published: 2025-07-14T09:18:18.045Z
Updated: 2025-07-14T14:40:41.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26292 |
vulnerable | 2026-06-08 06:31:26.265907 |
Authenticated Arbitrary File Deletion affecting Avid NEXIS
An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files.
This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Published: 2025-07-14T08:19:58.940Z
Updated: 2025-07-14T15:07:16.152Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26291 |
vulnerable | 2026-06-08 06:31:26.265270 |
Authenticated Arbitrary File Read affecting Avid NEXIS
An Unauthenticated Arbitrary File Read vulnerability affects the
Agent when installed on a system. The parameter filename does not validate the
path thus allowing users to read arbitrary files. As
the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM)
by default attackers are able to obtain sensitive information.
This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Published: 2025-07-14T08:12:16.139Z
Updated: 2025-07-14T15:06:09.582Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26290 |
vulnerable | 2026-06-08 06:31:26.263875 |
Authenticated Remote Command Injection affecting Avid NEXIS
Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permissions.This issue affects Avid NEXIS E-series: before 2024.6.0; Avid NEXIS F-series: before 2024.6.0; Avid NEXIS PRO+: before 2024.6.0; System Director Appliance (SDA+): before 2024.6.0.
Published: 2025-03-12T19:45:08.869Z
Updated: 2025-04-15T22:22:19.344Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.