High severity8.8NVD Advisory· Published Jul 6, 2016· Updated Jun 17, 2026

CVE-2016-0906

Description

The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EMC Corporation/Avamar
cpe:2.3:a:emc:avamar:*:*:*:*:*:*:*:*
Range: <=7.2.1
EMC Corporation/Avamar Server Virtual Editionllm-create
Range: <=7.1.2
EMC Corporation/Avamar Data Storellm-fuzzy
Range: <=7.1.2

Patches

Vulnerability mechanics

References

seclists.org/bugtraq/2016/Jul/33nvd
www.securitytracker.com/id/1036235nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000