PT-2013-4271

Name of the Vulnerable Software and Affected Versions EMC Avamar Server and Avamar Virtual Edition versions prior to 7.0 Description The issue makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to cross frame scripting vulnerabilities, due to the...

CVE-2013-3274: Undefined Security Weakness

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2013-0944

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL...

Code injection

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2013-0944

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL...

PT-2013-2738

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions prior to 6.1.0 Description The issue affects the web-based file-restore interface, allowing remote authenticated users to read arbitrary files by crafting a specific URL. Recommendations For versions prior to 6.1.0,...

CVE-2013-0944: Exposure of Sensitive Information to an Unauthorized Actor

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL...