CVE-2025-21117

Dell Avamar (VE/19.4+) is affected by CVE-2025-21117: an access token reuse vulnerability in the AUI that could allow a low-privileged local attacker to impersonate the user. The issue is documented across multiple sources as a token reuse flaw within the AUI, enabling local privilege impact with...

CVE-2024-47484

Dell Avamar/AVE 19.x prior to 19.12 with patch 338905 (excluding 19.10 and 19.10SP1 with patch 338869) are affected by an SQL Injection in the webRestoreLogin.action endpoint. The root cause is improper neutralization of user-supplied data used to construct SQL queries, enabling an unauthenticate...

CVE-2024-47977

Dell Avamar (AVE) prior to 19.12 with patch 338905 (excluding 19.10 and 19.10SP1 with patch 338869) is affected by CVE-2024-47977: an Improper Neutralization of Special Elements used in SQL Commands (SQL Injection) that could allow a low-privileged, remote attacker to execute commands on affected...

CVE-2024-52538

CVE-2024-52538 affects Dell Avamar (and AVE) with self-reported versions prior to 19.12 that include patch 338905, excluding 19.10 and 19.10SP1 with patch 338869. The root cause is an improper neutralization of special elements used in SQL commands, enabling a low-privilege, remote attacker to ca...