PT-2021-11683

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerStore versions prior to 1.0.3.0.5.007 Description: The issue is related to plain-text password storage in PowerStore X & T environments. A locally authenticated attacker could exploit this, leading to the disclosure of certain...

PT-2021-11673

Name of the Vulnerable Software and Affected Versions: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 Description: The issue concerns a plain-text password storage vulnerability. A user's credentials, including the Unisphere admin privilege user's password, are stored in...

PT-2021-11719

Name of the Vulnerable Software and Affected Versions: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9 Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16 Dell EMC PowerMax OS 5978.221.221 Dell EMC PowerMax OS 5978.479.479 Description: The issue is a Cross-Site Scripting XSS...

PT-2021-11226

Name of the Vulnerable Software and Affected Versions: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 Description: The issue concerns a plain-text password storage vulnerability. A user's credentials, including the Unisphere admin privilege user's password, are stored in...

Dell EMC Unity,UnityVSA 安全漏洞

DELL Dell EMC Unity and UnityVSA are both products of Dell DELL Corporation, U.S.A. Dell EMC Unity is a unified storage array product.UnityVSA is a set of virtual Unity storage environments. A security vulnerability exists in Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012,...

Dell EMC Isilon OneFS 和 Dell EMC PowerScale 安全漏洞

Dell EMC Isilon OneFS and Dell EMC PowerScale OneFS are both a set of horizontally scalable storage systems for unstructured data from Dell USA. A security vulnerability exists in Dell EMC Isilon OneFS version 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0, which originates from a...

CVE-2020-29500: Cleartext Storage of Sensitive Information

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to u...

DELL Dell EMC Unity和UnityVSA 资源管理错误漏洞

Dell EMC Unity and UnityVSA are both products of Dell DELL, U.S.A. Dell EMC Unity is a unified storage array product.UnityVSA is a set of virtual Unity storage environments. A denial of service vulnerability exists in Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012, which c...

CVE-2020-35170: Improper Neutralization of Input During Web Page Generation

Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting XSS vulnerability. An authenticated malicious user may potentially exploit this vulnerabilit...

PT-2021-11217

Name of the Vulnerable Software and Affected Versions: Dell EMC Isilon OneFS versions 8.1 and later Dell EMC PowerScale OneFS version 9.0.0 Description: The issue concerns a privilege escalation vulnerability on a SmartLock Compliance mode cluster. A compadmin user connecting using ISI PRIV LOGIN...

DELL Dell EMC Unity和UnityVSA 日志信息泄露漏洞

Dell EMC Unity is a unified storage array product. the UnityVSA is a set of virtual Unity storage environments. An information disclosure vulnerability exists in Dell EMC Unity, Unity XT and UnityVSA versions prior to 5.0.4.0.5.012. The vulnerability stems from the program storing user credential...

CVE-2020-29490: Uncontrolled Resource Consumption

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially exploit this vulnerability and cause Denial of Service Storage Processor Panic by sending specially...

Dell EMC Unisphere for PowerMax Cross-Site Scripting Vulnerability

Dell EMC Unisphere for PowerMax is a set of graphical management tools for PowerMax storage arrays from Dell DELL. A cross-site scripting vulnerability exists in Dell EMC Unisphere for PowerMax, which can be exploited by an attacker to trigger cross-site scripting in order to run JavaScript code ...

Cross site scripting

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to...

CVE-2020-26198

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to...

CVE-2020-26198

Dell EMC iDRAC9 is affected by a reflected cross-site scripting (XSS) vulnerability in the web UI for versions prior to 4.32.10.00 and 4.40.00.00. A remote attacker could lure a victim to a crafted link to execute malicious HTML/JavaScript in the browser. Public references indicate the vulnerabil...

CVE-2020-26198: Improper Neutralization of Input During Web Page Generation

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to...

DELL Dell EMC iDRAC9 Cross-Site Scripting Vulnerability

DELL Dell EMC iDRAC9 is a system management solution comprising hardware and software from Dell USA. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems. A cross-site scripting vulnerability exists in the Dell EMC iDRAC9 version 4.32.10.00 a...

PT-2020-16336

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.32.10.00 Dell EMC iDRAC9 versions prior to 4.40.00.00 Description The issue is a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this t...

EMC RSA Archer 6.8 < 6.8.0.4 / 6.9 < 6.9.0.1 URL Injection

The version of EMC RSA Archer running on the remote web server is 6.8.x prior to 6.8.0.4 6.8 P4 or 6.9.x prior to 6.9.0.1 6.9 P1. It is, therefore, affected by a URL injection vulnerability. An unauthenticated, remote attacker can exploit this by tricking a victim application user to execute...