CVE-2015-4527

EMC Avamar Server (7.x, prior to 7.1.2) and Avamar Virtual Edition (AVE) (7.x, prior to 7.1.2) are affected by a directory traversal flaw. The vulnerability allows remote attackers to read arbitrary files by sending crafted parameters via the Avamar Desktop/Laptop client interface. Root cause is ...

CVE-2013-3274

EMC Avamar Server and Avamar Virtual Edition before version 7.0 on Data Store Gen3, Gen4, and Gen4s hardware are affected by CVE-2013-3274 due to improper authorization checks on Java RMI calls. This potentially allows remote authenticated users to execute arbitrary code via unspecified vectors. ...

CVE-2013-3275

EMC Avamar Server and Avamar Virtual Edition prior to v7.0 on Data Store Gen3, Gen4, or Gen4s platforms are affected by cross frame scripting vulnerabilities (CVE-2013-3275). The web interface does not properly restrict FRAME elements, which can allow a crafted remote site to monitor input and ex...

CVE-2016-0909

Affected products: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) prior to 7.3.0 Hotfix 263301 (7.3.0.233). Issue: Local privilege escalation vulnerability allowing an attacker to execute arbitrary PostgreSQL commands on the remote host and gain elevated privileges. Root cause / vec...