Emc Avamar Server Virtual Edition vulnerabilities

4 CVEs affecting Emc Avamar Server Virtual Edition, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0909, published 2016-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-3274, published 2013-07-19. High severity, CVSS 9.0. EPSS: 3.1% chance of exploitation in the next 30 days. EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote…
CVE-2015-4527, published 2015-07-23. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar…
CVE-2013-3275, published 2013-07-19. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to…
CVE-2016-0909, published 2016-11-15. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users.