Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_avamar_server:18.2:*:*:*:*:*:*:*

part: a version: 18.2 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Avamar Server (d08e4e21-37c0-5aa4-ac51-ec4feaf66556)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36318 vulnerable 2026-06-08 05:32:50.812147 Details available
MEDIUM (6.7)
Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.
Published: 2021-12-21T17:05:25.057Z
Updated: 2024-09-17T02:10:36.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36316 vulnerable 2026-06-08 05:32:50.805761 Details available
MEDIUM (6.7)
Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI.
Published: 2021-12-21T17:05:22.027Z
Updated: 2024-09-16T16:53:35.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5341 vulnerable 2026-06-08 05:26:42.182563 Details available
CRITICAL (9.8)
Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated attacker could exploit this vulnerability to send a serialized payload that would execute code on the system.
Published: 2021-07-28T00:05:14.643Z
Updated: 2024-09-16T22:34:55.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3765 vulnerable 2026-06-08 05:13:55.948027 Details available
HIGH (8.1)
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could exploit this vulnerability to view or modify sensitive backup data. This could be used to make backups corrupt or potentially to trick a user into restoring a backup with malicious files in place.
Published: 2019-10-09T19:20:45.226Z
Updated: 2024-09-16T21:02:30.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3752 vulnerable 2026-06-08 05:13:55.875345 Details available
HIGH (8.2)
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External Entity(XXE) Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability to cause Denial of Service or information exposure by supplying specially crafted document type definitions (DTDs) in an XML request.
Published: 2021-07-16T21:20:09.995Z
Updated: 2024-09-16T23:40:28.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.