Advisories · Technology
Dell Avamar.
Every CVE that names Dell Avamar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.6 Medium
Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI.
- Dell Avamar
- CWE-672
- CVSS 7.1 High
SQL injection in Dell Avamar
- Dell Avamar
- SQL injection
- CVSS 8.2 High
SQL injection in Dell Avamar
- Dell Avamar
- SQL injection
- CVSS 7.6 High
SQL injection in Dell Avamar
- Dell Avamar
- SQL injection
- CVSS 6.7 Medium
Sensitive information in log files in Dell Avamar
- Dell Avamar
- Information disclosure
- CVSS 6.7 Medium
Plaintext password storage in Dell Avamar
- Dell Avamar
- CWE-256
- CVSS 6.7 Medium
Improper privilege management in Dell Avamar
- Dell Avamar
- Privilege escalation
- CVSS 6.1 Medium
Open redirect in Dell Avamar
- Dell Avamar
- Open redirect
- CVSS 8.2 High
XML external entity injection in Dell Avamar
- Dell Avamar
- XML external entities (XXE)
- CVSS 8.1 High
Improper authorization in Dell Avamar
- Dell Avamar
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Path traversal in Dell Avamar
- Dell Avamar
- Path traversal
- CVSS 8.7 High
Path traversal in Dell Avamar
- Dell Avamar
- Path traversal
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL injection in Dell Avamar
- Dell Avamar
- SQL injection
- CVSS 8.1 High
Incorrect permission assignment in Dell Avamar and others
- Dell Avamar
- Dell Integrated Data Protection Appliance
- Broken access control