CVE-2013-3275

Published: Jul 19, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilities."

Affected (10)

Products: Emc: Avamar Server, Avamar Server Virtual Edition

Emc

2 products

Avamar Server

Avamar Server Virtual Edition

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Emc Avamar Server	Up to 6.1
Emc Avamar Server	Version 4.0
Emc Avamar Server	Version 4.1
Emc Avamar Server	Version 5.0
Emc Avamar Server	Version 6.0
Emc Avamar Server Virtual Edition	Up to 6.1
Emc Avamar Server Virtual Edition	Version 4.0
Emc Avamar Server Virtual Edition	Version 4.1
Emc Avamar Server Virtual Edition	Version 5.0
Emc Avamar Server Virtual Edition	Version 6.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html

Source: security_alert@emc.com

http://archives.neohapsis.com/archives/bugtraq/2013-07/0114.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.