What’s Vulnerable › Vulnerabilities

CVE-2013-0944

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-03 · updated 2026-06-16
Weakness: CWE-200

Description

The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.

Affected products

EMC Avamar: 5.0, 5.0-sp1, 5.0-sp2, 5.0.0-407, 5.0.4-26, 6.0 (+3)

References

Get alerted when CVE-2013-0944 or the next vulnerability affects your stack