VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 19, 2013· Updated Jun 16, 2026

CVE-2013-3275

CVE-2013-3275

Description

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilities."

Affected products

12
  • EMC Corporation/Avamar Server6 versions
    cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:emc:avamar_server:*:*:*:*:*:*:*:*range: <=6.1
    • cpe:2.3:a:emc:avamar_server:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:avamar_server:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:avamar_server:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:avamar_server:6.0:*:*:*:*:*:*:*
    • (no CPE)range: <7.0
  • EMC Corporation/Avamar Server Virtual Edition6 versions
    cpe:2.3:a:emc:avamar_server_virtual_edition:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:emc:avamar_server_virtual_edition:*:*:*:*:*:*:*:*range: <=6.1
    • cpe:2.3:a:emc:avamar_server_virtual_edition:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:avamar_server_virtual_edition:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:avamar_server_virtual_edition:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:avamar_server_virtual_edition:6.0:*:*:*:*:*:*:*
    • (no CPE)range: <7.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.