Known vulnerabilities in Unified Data Protection 7.0 Update 2

Vendor: Arcserve

Software: Unified Data Protection

Version: 7.0 Update 2

Software CPE: cpe:2.3:a:arcserve:united_data_:*:*:*:*:*:*:*:*

Website: https://www.arcserve.com/

Total vulnerabilities: 6

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77811 - Improper Authentication CVE-2023-26258	CWE-287	High	Public exploit available	No	9.1	29.06.2023	SB2023062939
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Public exploit available	No	9.1	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Public exploit available	No	9.1	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU63084 - Improper input validation CVE-2022-22970	CWE-20	Medium	No	No	9.1	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 23 more
#VU61760 - Incorrect Regular Expression CVE-2022-22950	CWE-185	Medium	No	No	9.1	31.03.2022	SB2022033110 SB2022060308 SB2022060324 and 25 more
#VU48808 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-27858	CWE-611	Medium	No	No	-	07.12.2020	SB2020120721