Description
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenticationendpoint/domain.jsp issue.
Metrics
CVSS 3.1 6.1/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- https://support.arcserve.com/s/article/360001392563?language=en_USPatch, Vendor Advisory
- https://support.arcserve.com/s/article/Security-vulnerabilities-with-Arcserve-UDP-and-fixes-for-them?language=en_USPatch, Vendor Advisory
- https://www.digitaldefense.com/blog/zero-day-alerts/arcserve-disclosure/Third Party Advisory
- https://support.arcserve.com/s/article/360001392563?language=en_USPatch, Vendor Advisory
- https://support.arcserve.com/s/article/Security-vulnerabilities-with-Arcserve-UDP-and-fixes-for-them?language=en_USPatch, Vendor Advisory
- https://www.digitaldefense.com/blog/zero-day-alerts/arcserve-disclosure/Third Party Advisory
Timeline
- Published
- Oct 26, 2018
- Last modified
- Jun 17, 2026
- NVD status
- Modified