Udp

Vendor:

First CVE: May 29, 2015 · Active for 11 years

16
Total CVEs
More Total CVEs than 92% of tracked products
3.2
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
8.6
Avg CVSS
Higher Avg CVSS than 77% of tracked products
6.3%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Udp over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 29, 2015
11 years ago
Most Recent CVE
Aug 27, 2025
332 days ago

CVE Severity & Scoring

Udp16 CVEs
All CVEs352,708 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network16 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None14 (87.5%)
Unknown0 (0.0%)
Required2 (12.5%)
Privileges Required
Low2 (12.5%)
High0 (0.0%)
None14 (87.5%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (16 CVEs).

16 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2015-4068CRITICAL
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path t
May 29, 20159.189YESNO
CVE-2023-26258CRITICAL
Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used a
Jul 3, 20239.864NOYES
CVE-2024-0801HIGH
A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll.
Mar 13, 20247.557NOYES
CVE-2024-0799CRITICAL
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServic
Mar 13, 20249.844NOYES
CVE-2023-41998CRITICAL
Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execu
Nov 27, 20239.839NONO
CVE-2025-34522CRITICAL
A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be triggered without authentication by sending
Aug 27, 20259.832NONO
CVE-2025-34523CRITICAL
A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection (UDP). This flaw is reachable without authentica
Aug 27, 20259.831NONO
CVE-2025-34520CRITICAL
An authentication bypass vulnerability in Arcserve Unified Data Protection (UDP) allows unauthenticated attackers to gain unauthorized access to protected functionality or user acc
Aug 27, 20259.831NONO
CVE-2023-41999CRITICAL
An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authentic
Nov 27, 20239.830NONO
CVE-2023-42000CRITICAL
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploi
Nov 27, 20239.829NONO
View all 16 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (16 CVEs).

CISA KEV
1 CVE
6.2% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
3 CVEs
18.8% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (16 CVEs).

Media Mentions

Signals from CVEs in this product scope (16 CVEs).

Top CNAs Publishing CVEs For Udp

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.238.715.7%02
8.138.715.7%02
7.048.70.4%00
6.547.21.4%00
6.037.51.5%00
5.019.163.6%10