CVE-2016-0906

—

CVSS 3.0

8.8 high

EPSS

2%p74

Published

Jul 6, 2016 (Jul 6, 2016)

Modified

Jun 17, 2026

Description

The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.

Vendors: emc
Products: avamar
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.