9.0.6034

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-27	CVE-2023-41998	Unrestricted Upload of File with Dangerous Type vulnerability in Arcserve UDP Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. network low complexity arcserve CWE-434 critical	9.8
2023-11-27	CVE-2023-41999	Improper Authentication vulnerability in Arcserve UDP An authentication bypass exists in Arcserve UDP prior to version 9.2. network low complexity arcserve CWE-287 critical	9.8
2023-11-27	CVE-2023-42000	Path Traversal vulnerability in Arcserve UDP Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). network low complexity arcserve CWE-22 critical	9.8
2023-07-03	CVE-2023-26258	Incorrect Authorization vulnerability in Arcserve UDP Arcserve UDP through 9.0.6034 allows authentication bypass. network low complexity arcserve CWE-863 critical	9.8