Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_avamar_server:7.5.1:*:*:*:*:*:*:*

part: a version: 7.5.1 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Avamar Server (d08e4e21-37c0-5aa4-ac51-ec4feaf66556)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5341 vulnerable 2026-06-08 05:26:42.181201 Details available
CRITICAL (9.8)
Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated attacker could exploit this vulnerability to send a serialized payload that would execute code on the system.
Published: 2021-07-28T00:05:14.643Z
Updated: 2024-09-16T22:34:55.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3765 vulnerable 2026-06-08 05:13:55.948008 Details available
HIGH (8.1)
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could exploit this vulnerability to view or modify sensitive backup data. This could be used to make backups corrupt or potentially to trick a user into restoring a backup with malicious files in place.
Published: 2019-10-09T19:20:45.226Z
Updated: 2024-09-16T21:02:30.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3752 vulnerable 2026-06-08 05:13:55.874764 Details available
HIGH (8.2)
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External Entity(XXE) Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability to cause Denial of Service or information exposure by supplying specially crafted document type definitions (DTDs) in an XML request.
Published: 2021-07-16T21:20:09.995Z
Updated: 2024-09-16T23:40:28.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.