Arcserve Unified Data Protection XML External Entity Injection Vulnerability

Arcserve Unified Data Protection UDP is a set of unified data protection solutions from Arcserve, Inc. in the United States. The solution provides backup and recovery of all virtual and physical environments, global deduplication, and more. An XML external entity injection vulnerability exists in...

CVE-2018-18659

An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...

PT-2018-14569

Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection UDP versions through 6.5 Update 4 Description An issue was discovered in Arcserve Unified Data Protection UDP. There is an Unauthenticated XXE issue in the /management/UdpHttpService endpoint. Recommendations F...