Known vulnerabilities in Unified Data Protection

Known vulnerabilities in Unified Data Protection

Vendor: Arcserve

Software: Unified Data Protection

Software CPE: cpe:2.3:a:arcserve:united_data_:*:*:*:*:*:*:*:*

Website: https://www.arcserve.com/

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU89596 - Improper input validation CVE-2024-0801	CWE-20	Medium	No	No	8.1 P00003059, 9.2 P00003050	16.05.2024	SB2024051624
#VU89595 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-0800	CWE-22	Medium	No	No	8.1 P00003059, 9.2 P00003050	16.05.2024	SB2024051624
#VU89593 - Improper Authentication CVE-2024-0799	CWE-287	High	No	No	8.1 P00003059, 9.2 P00003050	16.05.2024	SB2024051624
#VU77811 - Improper Authentication CVE-2023-26258	CWE-287	High	Available	No	9.1	29.06.2023	SB2023062939
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	9.1	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	9.1	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU63084 - Improper input validation CVE-2022-22970	CWE-20	Medium	No	No	9.1	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 23 more
#VU61760 - Incorrect Regular Expression CVE-2022-22950	CWE-185	Medium	No	No	9.1	31.03.2022	SB2022033110 SB2022060308 SB2022060324 and 25 more
#VU48808 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-27858	CWE-611	Medium	No	No	-	07.12.2020	SB2020120721
#VU15524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Low	No	No	-	25.10.2018	SB2018102503
#VU15523 - Exposure of sensitive information to an unauthorized actor	CWE-200	Low	No	No	-	25.10.2018	SB2018102503
#VU15522 - Exposure of sensitive information to an unauthorized actor	CWE-200	Low	No	No	-	25.10.2018	SB2018102503
#VU15521 - Improper Restriction of XML External Entity Reference ('XXE')	CWE-611	Low	No	No	-	25.10.2018	SB2018102503