Approved changes feed: RSS · Atom

cpe:2.3:a:dell:emc_avamar_server:19.2:*:*:*:*:*:*:*

part: a version: 19.2 update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Avamar Server (d08e4e21-37c0-5aa4-ac51-ec4feaf66556)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36318 vulnerable 2026-06-08 05:32:50.812197 Details available
MEDIUM (6.7)
Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete outage.
Published: 2021-12-21T17:05:25.057Z
Updated: 2024-09-17T02:10:36.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36316 vulnerable 2026-06-08 05:32:50.807906 Details available
MEDIUM (6.7)
Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI.
Published: 2021-12-21T17:05:22.027Z
Updated: 2024-09-16T16:53:35.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5341 vulnerable 2026-06-08 05:26:42.184096 Details available
CRITICAL (9.8)
Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated attacker could exploit this vulnerability to send a serialized payload that would execute code on the system.
Published: 2021-07-28T00:05:14.643Z
Updated: 2024-09-16T22:34:55.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29495 vulnerable 2026-06-08 05:24:58.303564 Details available
CRITICAL (10)
DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS with high privileges. This vulnerability is considered critical as it can be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity.
Published: 2021-01-14T21:10:16.713Z
Updated: 2024-09-16T16:12:48.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29494 vulnerable 2026-06-08 05:24:58.302795 Details available
HIGH (8.7)
Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the arbitrary files stored on the server filesystem, causing deletion of arbitrary files.
Published: 2021-01-14T21:10:16.028Z
Updated: 2024-09-16T17:38:57.030Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29493 vulnerable 2026-06-08 05:24:58.299967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.