CVE-2016-0889: Improper Input Validation

An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname...

The vulnerability of the EMC Unisphere data storage management program allows a hacker to execute arbitrary code.

The vulnerability of the EMC Unisphere data storage management program with the installed JDWP service is related to code errors. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

CVE-2015-0545

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-0545

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-0545

EMC Unisphere for VMAX 8.x before 8.0.3.4 enables the Java Debug Wire Protocol (JDWP) service, which could allow remote attackers to execute arbitrary code. Affected products are EMC Unisphere for VMAX 8.0.x prior to 8.0.3.4; EMC’s security advisory and related CVE records confirm this is a remot...

PT-2015-1389

Name of the Vulnerable Software and Affected Versions EMC Unisphere for VMAX versions 8.0.0 through 8.0.3.3 Description The issue is related to the setup of the Java Debugging Wire Protocol JDWP service in EMC Unisphere for VMAX, which allows remote attackers to execute arbitrary code. The...

EMC Unisphere for VMAX code execution

JDWP access is possible...

ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability EMC Identifier: ESA-2015-102 CVE Identifier: CVE-2015-0545 Severity Rating: CVSS v2 Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC Unisphere for VMAX 8.0.0 ...

CVE-2015-0545: Undefined Security Weakness

EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

EMC Unisphere for VMAX Remote Code Execution Vulnerability

EMC Unisphere for VMAX is the advanced graphical user interface. EMC Unisphere for VMAX with the JDWP service enabled enables an unauthenticated attacker to execute arbitrary code on the affected system...

CVE-2015-0512

Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

Open redirect

Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

CVE-2015-0512

Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

CVE-2015-0512

Open redirect vulnerability (CVE-2015-0512) in EMC Unisphere Central prior to 4.0. Affected component: Unisphere Central web interface. Description: an unvalidated redirect parameter could send users to arbitrary external sites, enabling phishing by manipulation of the URL. CVSSv2 base score 5.8 ...

CVE-2015-0512: Undefined Security Weakness

Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

PT-2015-4677

Name of the Vulnerable Software and Affected Versions EMC Unisphere Central versions prior to 4.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter. Recommendations For versions prior to 4.0, update to...

EMC Unisphere Central open redirect

Open redirect in web interface...

Unspecified Open Redirection Vulnerability in EMC Unisphere Central

EMC Unisphere is a next-generation unified storage management platform from EMC Corporation. unisphere Central is one of the components that provides centralized, multi-chassis monitoring for multiple VNXe, VNX, CLARiion CX4 systems and XtremSW Cache cards deployed in remote and branch offices. A...

ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities EMC Identifier: ESA-2015-002 CVE Identifier: CVE-2013-1899, CVE-2013-1900, CVE-2013-1901, CVE-2013-1902, CVE-2012-5885, CVE-2011-3389, CVE-2013-1767, CVE-2012-2137,...