Arcserve UDP vulnerabilities

3 vulnerabilities

Known vulnerabilities in Arcserve UDP, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2023-41999arcservearcserve udp+1
EPSS score
1.44%
An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authenticate to the management console and perform tasks that require authentication.9.8CVE-2023-41998arcservearcserve udp+1
EPSS score
15.27%
Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files.9.8CVE-2023-42000arcservearcserve udp+1
EPSS score
1.47%
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.