CVE-2016-0923

The client in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging server...

CVE-2016-6641

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6642

Cross-site request forgery CSRF vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files...

CVE-2016-6643

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6642

Vulnerability: CSRF in EMC ViPR SRM prior to 3.7.2 allows remote attackers to hijack administrator authentication for file-upload requests. Affected product: EMC ViPR SRM (storage resource management software). Root cause / vector: Cross-site request forgery. No exploit details are provided in th...

CVE-2016-0922

Affected product: EMC ViPR SRM (before 3.7.2). Issue: failure to limit password-authentication attempts, enabling brute-force guessing from remote attackers. Root cause/impact: lack of rate-limiting on authentication leads to potential unauthorized access; integrity and availability are not direc...

CVE-2016-6641

EMC ViPR SRM is affected by a cross-site scripting (XSS) vulnerability in versions prior to 3.7.2. Remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. The issue is documented across multiple sources (e.g., CNVD/NVD) and is fixed in version 3.7.2. Practical ...

CVE-2016-6643

CVE-2016-6643 affects EMC ViPR SRM before 3.7.2. It is a cross-site scripting (XSS) vulnerability that allows a remote attacker to inject arbitrary web script or HTML via unspecified vectors. The CNVD entry and CNVD-2016-07740 corroborate affected versions are prior to 3.7.2 and describe the impa...

CVE-2016-0922

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack...

CVE-2016-0923

CVE-2016-0923 affects the EMC RSA BSAFE Micro Edition Suite (MES) client. The vulnerability is that MES 4.0.x (before 4.0.9) and 4.1.x (before 4.1.5) places the weakest signature algorithms first in the signature-algorithm list sent to the server, enabling a remote attacker to defeat cryptographi...

PT-2016-7016

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.7.2, update to version 3.7.2 or...

PT-2016-4476

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.8 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.4 Description The issue concerns the client in EMC RSA BSAFE Micro Edition Suite MES that places the weakest...

PT-2016-7014

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

PT-2016-7015

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that upload files. Recommendations For versions prior to 3.7.2, update to...

CVE-2016-6642: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files...

CVE-2016-6643: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-4475

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description The issue allows remote attackers to gain access through a brute-force guessing attack due to the lack of restriction on the number of password-authentication attempts. Recommendations For...

CVE-2016-6641: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0922: Improper Authorization

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack...

CVE-2016-0923: Use of a Broken or Risky Cryptographic Algorithm

The client in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging server...