Approved changes feed: RSS · Atom

cpe:2.3:a:emc:avamar:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductAvamar (a7531d48-a2e5-509e-9dbe-30c301b7538d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0945 vulnerable 2026-06-08 05:03:51.314634 Details available
EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Published: 2013-05-03T10:00:00.000Z
Updated: 2024-09-17T00:50:49.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2291 vulnerable 2026-06-08 05:02:03.184877 Details available
EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to gain privileges via an unspecified symlink attack.
Published: 2013-01-21T21:00:00.000Z
Updated: 2024-09-17T01:06:37.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1740 vulnerable 2026-06-08 04:58:01.805134 Details available
EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.
Published: 2011-09-17T10:00:00.000Z
Updated: 2024-08-06T22:37:25.674Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.