Approved changes feed: RSS · Atom

cpe:2.3:a:emc:avamar:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductAvamar (a7531d48-a2e5-509e-9dbe-30c301b7538d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0945 vulnerable 2026-06-03 14:32:46.848058 Details available
EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Published: 2013-05-03T10:00:00.000Z
Updated: 2024-09-17T00:50:49.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0944 vulnerable 2026-06-03 14:32:46.841172 Details available
The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.
Published: 2013-05-03T10:00:00.000Z
Updated: 2024-09-16T23:05:59.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2291 vulnerable 2026-06-03 14:31:52.184054 Details available
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Published: 2013-01-21T21:00:00.000Z
Updated: 2024-09-17T01:06:37.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1740 vulnerable 2026-06-03 14:31:03.690193 Details available
EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.
Published: 2011-09-17T10:00:00.000Z
Updated: 2024-08-06T22:37:25.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0648 vulnerable 2026-06-03 14:30:50.411862 Details available
Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors.
Published: 2011-03-16T22:00:00.000Z
Updated: 2024-08-06T21:58:26.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0442 vulnerable 2026-06-03 14:30:49.022492 Details available
The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network.
Published: 2011-03-16T22:00:00.000Z
Updated: 2024-08-06T21:51:09.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.