CVE-2025-36582

< 19.13

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgra

4.8MEDIUM

CVE-2025-21104

< 19.11.0.4

Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redirect') Vul

4.3MEDIUM

CVE-2025-21103

< 19.10.0.7

Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutral

7.8HIGH

CVE-2025-21107

< 19.11.0.3

Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Elemen

7.8HIGH

CVE-2024-42422

< 19.10.0.6

Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated

8.3HIGH

CVE-2024-22432

<= 19.9

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMD

7.8HIGH

CVE-2023-28055

>= 19.7 and < 19.7.0.5

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker with

8.8HIGH

CVE-2023-25539

< 19.7.0.4

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker

8.4HIGH

CVE-2023-24568

<= 19.7.0.3

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disal

5.0MEDIUM

CVE-2017-15550

all versions

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x,

8.8HIGH

CVE-2017-15549

all versions

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x,

8.8HIGH

CVE-2017-15548

all versions

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x,

9.8CRITICAL

CVE-2017-8022

<= 8.2.4.8

An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The

8.1HIGH

CVE-2016-0916

>= 8.2.1.0 and <= 8.2.1.8

EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers t

9.8CRITICAL

CVE-2015-6849

all versions

EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to caus

CVE-2015-0530

<= 8.0.4.3

Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x befo

CVE-2014-4620

all versions

The EMC NetWorker Module for MEDITECH (aka NMMEDI) 3.0 build 87 through 90, when EMC RecoverPoint and Plink are used, stores clear

CVE-2013-3285

all versions

The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication,

CVE-2013-0943

all versions

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-sy

CVE-2013-0940

<= 7.6.5.2

The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified fil

CVE-2012-4607

all versions

Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to exe

CVE-2012-2288

all versions

Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allow

CVE-2012-0395

all versions

Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attacke

CVE-2011-1421

all versions

EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an

CVE-2011-0321

<= 7.5

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigat

CVE-2006-3892

all versions

The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, w

CVE-2002-0114

all versions

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local user

CVE-2002-0113

all versions

EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions,

CVE-2001-0910

all versions

Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface b