PatchTheCVEavamar vulnerabilities and fixes
Recent CVEs affecting avamar, with upgrade or downgrade steps. 1 tracked.
avamar has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-04. Highest priority: CVE-2025-21120 (score 35/100).
- CVE-2025-21120 HIGH 8.3 DOWNGRADE DOWNGRADE Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the
FAQ
How do I fix avamar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is avamar being exploited right now?
None of the tracked avamar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which avamar CVE should I patch first?
CVE-2025-21120 currently ranks highest (35/100): Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the.