GCVE - cpe:2.3:a:dell:emc_avamar:18.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_avamar:18.1:*:*:*:*:*:*:*

part: a version: 18.1 update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Emc Avamar (`110ced8b-40a9-513d-8d84-7ee02babae30`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-11077`	vulnerable	2026-06-08 05:10:37.843047	Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability 'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege. Published: 2018-11-26T20:00:00.000Z Updated: 2024-09-17T03:06:58.660Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2018-0029.html https://seclists.org/fulldisclosure/2018/Nov/51 http://www.securityfocus.com/bid/105971 http://www.securitytracker.com/id/1042153	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11067`	vulnerable	2026-06-08 05:10:37.822703	Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites. Published: 2018-11-26T20:00:00.000Z Updated: 2024-09-17T00:11:44.344Z Open on db.gcve.eu Reference links https://seclists.org/fulldisclosure/2018/Nov/49 https://www.vmware.com/security/advisories/VMSA-2018-0029.html http://www.securityfocus.com/bid/105969 http://www.securitytracker.com/id/1042153	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11066`	vulnerable	2026-06-08 05:10:37.809470	Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server. Published: 2018-11-26T20:00:00.000Z Updated: 2024-09-17T03:43:20.412Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/105968 https://seclists.org/fulldisclosure/2018/Nov/49 https://www.vmware.com/security/advisories/VMSA-2018-0029.html http://www.securitytracker.com/id/1042153	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.