Skip to content
OpenAdvisories

Vendor

Avid

4 known vulnerabilities.

Products

Avid NEXIS E-series 4 Avid NEXIS F-series 4 Avid NEXIS PRO+ 4 System Director Appliance (SDA+) 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.7
    CVE-2024-26293

    Unauthenticated Path Traversal affecting Avid NEXIS

    The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F…

    Avid Avid NEXIS F-series System Director Appliance (SDA+) Avid NEXIS E-series
  • High 7.1
    CVE-2024-26292

    Authenticated Arbitrary File Deletion affecting Avid NEXIS

    An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SD…

    Avid System Director Appliance (SDA+) Avid NEXIS E-series Avid NEXIS PRO+
  • High 8.7
    CVE-2024-26291

    Authenticated Arbitrary File Read affecting Avid NEXIS

    An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTH…

    Avid Avid NEXIS E-series Avid NEXIS PRO+ Avid NEXIS F-series
  • High 8.7
    CVE-2024-26290

    Authenticated Remote Command Injection affecting Avid NEXIS

    Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permi…

    Avid Avid NEXIS F-series System Director Appliance (SDA+) Avid NEXIS E-series