AR
Vendor
Arcserve
33
CVEs
2
On KEV
0
New 30D
Products
UD9.8
Udp
Arcserve
16 CVEs1 on KEV0 new
UD9.8
Unified Data Protection (UDP)
Arcserve
5 CVEs1 on KEV0 new
AU9.8
Arcserve UDP
Arcserve
3 CVEs0 on KEV0 new
AU9.8
Arcserve Unified Data Protection
Arcserve
3 CVEs0 on KEV0 new
UD9.8
Unified Data Protection
Arcserve
3 CVEs0 on KEV0 new
BR–
Brightstor
Arcserve
1 CVEs0 on KEV0 new
D27.5
D2d
Arcserve
1 CVEs0 on KEV0 new
UC6.3
UDP Console
Arcserve
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40118 | UC UDP Console Arcserve | 6.3 | Apr 16 | UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability |
| CVE-2025-34520 | UD Unified Data Protection (UDP) Arcserve | 9.8 | Aug 27 | Arcserve UDP < 10.2 Authentication Bypass |
| CVE-2025-34521 | UD Unified Data Protection (UDP) Arcserve | 5.4 | Aug 27 | Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS) |
| CVE-2025-34522 | UD Unified Data Protection (UDP) Arcserve | 9.8 | Aug 27 | Arcserve UDP < 10.2 Pre-Authentication Heap Overflow |
| CVE-2025-34523 | UD Unified Data Protection (UDP) Arcserve | 9.8 | Aug 27 | Arcserve UDP < 10.2 Pre-Authentication Heap Overflow |
| CVE-2024-0801 | UD Unified Data Protection Arcserve | 7.5 | Mar 13 | Unauthenticated DoS in Arcserve Unified Data Protection |
| CVE-2024-0800 | UD Unified Data Protection Arcserve | 8.8 | Mar 13 | Authentication Bypass via wizardLogin in Arcserve Unified Data Protection |
| CVE-2024-0799 | UD Unified Data Protection Arcserve | 9.8 | Mar 13 | Authentication Bypass via wizardLogin in Arcserve Unified Data Protection |
| CVE-2023-42000 | AU Arcserve UDP Arcserve | 9.8 | Nov 27 | Arcserve UDP Agent Unauthenticated Path Traversal File Upload |
| CVE-2023-41999 | AU Arcserve UDP Arcserve | 9.8 | Nov 27 | Arcserve UDP Management Authentication Bypass |
| CVE-2023-41998 | AU Arcserve UDP Arcserve | 9.8 | Nov 27 | Arcserve UDP Unauthenticated RCE |
| CVE-2023-26258 | UD Udp Arcserve | 9.8 | Jul 3 | Arcserve UDP through 9.0.6034 allows authentication bypass |
| CVE-2020-27858 | D2 D2d Arcserve | 7.5 | Jan 20 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5 |
| CVE-2018-18660 | UD Udp Arcserve | 6.1 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2018-18659 | UD Udp Arcserve | 7.5 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2018-18658 | UD Udp Arcserve | 7.5 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2018-18657 | UD Udp Arcserve | 7.5 | Oct 26 | An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4 |
| CVE-2015-4069 | AU Arcserve Unified Data Protection Arcserve | – | May 29 | The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy… |
| CVE-2015-4068 In wildKEV | UD Udp Arcserve | 9.1 | May 29 | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability |
| CVE-2006-6641 | BR Brightstor Arcserve | – | Dec 20 | Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion… |