Arcserve vulnerabilities
Published CVEs affecting Arcserve products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-40118
Medium · 6.3
CWE-941 Apr 16, 2026
UDP Console provided by Arcserve contains an incorrectly specified destination in a…
UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing information disclosure.
CVE-2015-4068
Critical · 9.1
KEV High · 63 CWE-22 May 29, 2015
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.