avamar server vulnerabilities and fixes

Recent CVEs affecting avamar server, with upgrade or downgrade steps. 4 tracked.

Also searched as: avamarserver.

avamar server has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-05. Highest priority: CVE-2024-47484 (score 47/100).

• CVE-2025-21117 MEDIUM 6.6 DOWNGRADE Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI
• CVE-2024-52538 HIGH 7.6 DOWNGRADE Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contai
• CVE-2024-47977 HIGH 7.1 DOWNGRADE Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contai
• CVE-2024-47484 HIGH 8.2 DOWNGRADE Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contai

FAQ

How do I fix avamar server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is avamar server being exploited right now?

None of the tracked avamar server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which avamar server CVE should I patch first?

CVE-2024-47484 currently ranks highest (47/100): Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contai.

RSS feed for avamar server · ← Back to latest CVEs