| Package | Affected versions | Patched versions |
|---|---|---|
| emc avamar server | = 18.2= 19.1= 7.4.1= 7.5.0= 7.5.1 | |
| emc integrated data protection appliance | = 2.0= 2.1= 2.2= 2.3= 2.4 |
Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External Entity(XXE) Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability to cause Denial of Service or information exposure by supplying specially crafted document type definitions (DTDs) in an XML request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free