PT-2022-11871

Name of the Vulnerable Software and Affected Versions Dell EMC Unity versions prior to 5.1.2.0.5.007 Dell EMC UnityVSA versions prior to 5.1.2.0.5.007 Dell EMC Unity XT versions prior to 5.1.2.0.5.007 Description The issue allows a locally authenticated user with high privileges to potentially...

CVE-2021-43589: Improper Neutralization of Special Elements used in a Command

Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system OS command injection Vulnerability. A locally authenticated user with high privileges may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands o...

PT-2019-16694

Name of the Vulnerable Software and Affected Versions Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116 Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 Dell EMC VNXe3200 versions prior to 3.1.10.9946299 Description The issue is related to a reflected cross-site scripting...

CVE-2019-3754: Improper Neutralization of Input During Web Page Generation

Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could...

PT-2018-10278

Name of the Vulnerable Software and Affected Versions Dell EMC Unity OE versions 4.3.0.x through 4.3.1.x Dell EMC UnityVSA OE versions 4.3.0.x through 4.3.1.x Description The issue is related to incorrect file permissions, allowing a locally authenticated malicious user to potentially alter...

CVE-2018-1250

Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based...