8.4
CVE-2016-0909
- EPSS 0.38%
- Veröffentlicht 15.11.2016 19:30:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginEMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Avamar Data Store Version <= 7.3
Emc ≫ Avamar Server Virtual Edition Version <= 7.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.38% | 0.293 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.4 | 2.5 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.securityfocus.com/archive/1/539613
http://www.securityfocus.com/bid/93788
http://www.securitytracker.com/id/1037066