CVE-2025-34521

{"id": "CVE-2025-34521", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34521", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-08-28T14:22:20.715713Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Arcserve", "modules": ["Web interface input handling and response rendering logic"], "product": "Unified Data Protection (UDP)", "versions": [{"status": "unaffected", "version": "10.2"}, {"status": "affected", "version": "8.0", "versionType": "custom", "lessThanOrEqual": "10.1"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.*"}], "defaultStatus": "unaffected"}]}], "published": "2025-08-27T22:15:57.870", "references": [{"url": "https://support.arcserve.com/s/article/Important-Security-Bulletin-Must-read-for-all-Arcserve-UDP-customers-on-all-versions", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the Arcserve Unified Data Protection (UDP), where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by another user, execute arbitrary JavaScript in the victim\u2019s browser. Successful exploitation may lead to session hijacking, credential theft, or other client-side impacts. The vulnerability requires user interaction and occurs within a shared browser context. This vulnerability affects all UDP versions prior to 10.2. UDP 10.2 includes the necessary patches and requires no action. Versions 8.0 through 10.1 are supported and require either patch application or upgrade to 10.2. Versions 7.x and earlier are unsupported or out of maintenance and must be upgraded to 10.2 to remediate the issue."}, {"lang": "es", "value": "Una vulnerabilidad de cross-site scripting (XSS) reflejado existe en la interfaz web de Arcserve Unified Data Protection (UDP), donde la entrada de usuario no saneada se refleja incorrectamente en las respuestas HTTP. Esta falla permite a atacantes remotos con bajos privilegios crear enlaces maliciosos que, al ser visitados por otro usuario, ejecutan JavaScript arbitrario en el navegador de la v\u00edctima. La explotaci\u00f3n exitosa puede llevar a secuestro de sesi\u00f3n, robo de credenciales u otros impactos del lado del cliente. La vulnerabilidad requiere interacci\u00f3n del usuario y ocurre dentro de un contexto de navegador compartido. Esta vulnerabilidad afecta a todas las versiones de UDP anteriores a la 10.2. UDP 10.2 incluye los parches necesarios y no requiere ninguna acci\u00f3n. Las versiones 8.0 a 10.1 son compatibles y requieren la aplicaci\u00f3n de parches o la actualizaci\u00f3n a la 10.2. Las versiones 7.x y anteriores no son compatibles o est\u00e1n fuera de mantenimiento y deben actualizarse a la 10.2 para remediar el problema."}], "lastModified": "2026-09-26T00:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53D70153-E6B7-4D27-83AA-77817EBBBC3E", "versionEndExcluding": "7.0"}, {"criteria": "cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7644D867-3950-4EBF-9CBE-644458C26801", "versionEndExcluding": "10.2", "versionStartIncluding": "8.0"}, {"criteria": "cpe:2.3:a:arcserve:udp:7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CAB17ED-9FBC-475F-8206-3BC8E672C719"}, {"criteria": "cpe:2.3:a:arcserve:udp:7.0:update_1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8672F05B-B0FC-4A81-8D5B-2A7DE8C6D92D"}, {"criteria": "cpe:2.3:a:arcserve:udp:7.0:update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1379C0DE-8BB0-47FF-AE56-6E54F125E5A0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}