Dell Emc Avamar Server vulnerabilities

11 CVEs affecting Dell Emc Avamar Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-36318, published 2021-12-21.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-29495, published 2021-01-14. Critical severity, CVSS 10.0. EPSS: 6.4% chance of exploitation in the next 30 days. DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability,…
• CVE-2020-5341, published 2021-07-28. Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days. Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3,…
• CVE-2020-29493, published 2021-01-14. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading…
• CVE-2020-29494, published 2021-01-14. High severity, CVSS 8.7. EPSS: 1.7% chance of exploitation in the next 30 days. Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the…
• CVE-2019-3765, published 2019-10-09. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission…
• CVE-2021-21511, published 2021-02-15. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain…
• CVE-2019-3752, published 2021-07-16. High severity, CVSS 8.2. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External Entity(XXE)…
• CVE-2020-5329, published 2021-07-29. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Dell EMC Avamar Server contains an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the…
• CVE-2021-36316, published 2021-12-21. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this…
• CVE-2021-36318, published 2021-12-21. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentially exploit this vulnerability, leading to a complete…

Latest

• CVE-2021-36317, published 2021-12-21. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulnerability, leading to the disclosure of…