Vulnerabilities > Arcserve > UDP > 7.0

DATE CVE VULNERABILITY TITLE RISK
2023-11-27 CVE-2023-41998 Unrestricted Upload of File with Dangerous Type vulnerability in Arcserve UDP
Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface.
network
low complexity
arcserve CWE-434
critical
 9.8
9.8
2023-11-27 CVE-2023-41999 Improper Authentication vulnerability in Arcserve UDP
An authentication bypass exists in Arcserve UDP prior to version 9.2.
network
low complexity
arcserve CWE-287
critical
 9.8
9.8
2023-11-27 CVE-2023-42000 Path Traversal vulnerability in Arcserve UDP
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload().
network
low complexity
arcserve CWE-22
critical
 9.8
9.8
2023-07-03 CVE-2023-26258 Incorrect Authorization vulnerability in Arcserve UDP
Arcserve UDP through 9.0.6034 allows authentication bypass.
network
low complexity
arcserve CWE-863
critical
 9.8
9.8