CVE-2020-5319

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability an...

CVE-2020-5319

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability an...

CVE-2020-5318

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are...

CVE-2020-5318

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are...

Cross site scripting

Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious...

Denial of service

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability an...

Authentication flaw

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are...

CVE-2020-5319

Dell EMC Unity family (Unity, Unity XT, UnityVSA) versions prior to 5.0.2.0.5.009 are affected by a Denial of Service vulnerability in the NAS Server SSH implementation used for SFTP. A remote unauthenticated attacker can cause a Storage Processor Panic by sending an out‑of‑order SSH sequence. Re...

CVE-2020-5319

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability an...

CVE-2020-5317

Dell EMC ECS is affected by a Cross‑Site Scripting (XSS) vulnerability in versions prior to 3.4.0.1. A remote authenticated attacker can store malicious HTML/JavaScript in a trusted application data store, which executes in victims’ browsers when accessing the data store. A fixed version is 3.4.0...

CVE-2020-5317

Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious...

CVE-2020-5318

Dell EMC Isilon OneFS prior to fixed versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contains a vulnerability in non-RAN HTTP and WebDAV components where enabling Basic Authentication for these components allows access to files without authentication. Impact: potential exposure of restricted files....

CVE-2020-5318

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are...

CVE-2020-5317: Improper Neutralization of Input During Web Page Generation

Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious...

CVE-2020-5319: Improper Validation of Array Index

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability an...

PT-2020-18400

Name of the Vulnerable Software and Affected Versions Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 Description The issue concerns a Denial of Service vulnerability in the NAS Server SSH implementation used for SFTP service on a NAS server. A remote...

PT-2020-18398

Name of the Vulnerable Software and Affected Versions Dell EMC ECS versions prior to 3.4.0.1 Description The issue allows a remote authenticated malicious user to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their...

CVE-2020-5318: Improper Authorization

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are...

PT-2020-18399

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon OneFS versions 8.0.0.7, 8.1.0.3, 8.1.0.4, and 8.1.2 Description The issue allows an attacker to gain access to restricted files in certain configurations. This is due to a vulnerability in the non-RAN HTTP and WebDAV file-servi...

CVE-2014-5039

CVE-2014-5039 is a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x prior to 4.0.2. The XSS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected product and vulnerability class, bu...