Arcserve Unified Data Protection (UDP) vulnerabilities

16 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Exploited Arcserve Unified Data Protection (UDP) vulnerabilities

CVE-2015-4068 — Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability

CVE-2025-34523 — Arcserve UDP < 10.2 Pre-Authentication Heap Overflow (CVSS 9.8)
CVE-2025-34522 — Arcserve UDP < 10.2 Pre-Authentication Heap Overflow (CVSS 9.8)
CVE-2025-34521 — Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS) (CVSS 5.4)
CVE-2025-34520 — Arcserve UDP < 10.2 Authentication Bypass (CVSS 9.8)
CVE-2024-0801 — Unauthenticated DoS in Arcserve Unified Data Protection (CVSS 7.5)
CVE-2024-0800 — Authentication Bypass via wizardLogin in Arcserve Unified Data Protection (CVSS 8.8)
CVE-2024-0799 — Authentication Bypass via wizardLogin in Arcserve Unified Data Protection (CVSS 9.8)
CVE-2023-42000 — Arcserve UDP Agent Unauthenticated Path Traversal File Upload (CVSS 9.8)
CVE-2023-41999 — Arcserve UDP Management Authentication Bypass (CVSS 9.8)
CVE-2023-41998 — Arcserve UDP Unauthenticated RCE (CVSS 9.8)
CVE-2023-26258 — (CVSS 9.8)
CVE-2018-18660 — (CVSS 6.1)
CVE-2018-18659 — (CVSS 7.5)
CVE-2018-18658 — (CVSS 7.5)
CVE-2018-18657 — (CVSS 7.5)
CVE-2015-4068 — Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability (CVSS 9.1) — exploited