CVE-2015-0516

EMC M&R (Watch4Net) path traversal vulnerability CVE-2015-0516 affects EMC M&R/Watch4Net prior to 6.5u1 and EMC ViPR SRM prior to 3.6.1. An authenticated user can manipulate URLs to read arbitrary files on the system via the MIB Browser/Device Discovery interfaces. Root cause is a directory trave...

CVE-2015-0515

CVE-2015-0515 affects EMC M&R (Watch4Net) before 6.5u1 and EMC ViPR SRM before 3.6.1. An unauthenticated? No: authenticated, privileged user can upload an arbitrary file via the web interface and access that file to execute code on the affected system. The issue is part of a set of Watch4Net/ViPR...

CVE-2015-0513

CVE-2015-0513 describes Cross-Site Scripting in EMC M&R (Watch4Net) Centralized Management Console and related UI components. Affected products are EMC M&R (Watch4Net) up to version 6.5u1 and EMC ViPR SRM up to version 3.6.1. The root cause is reflected/stored XSS in administrative UI elements (C...

CVE-2015-0514

EMC M&R (Watch4net) before 6.5u1 and ViPR SRM before 3.6.1 store remote-server credentials in Watch4net encrypted with a fixed hardcoded password, which makes the credentials decryptible if an attacker obtains the encrypted copy. Affected products include EMC M&R (Watch4Net) < 6.5u1 and EMC Vi...

CVE-2015-0513

Multiple cross-site scripting XSS vulnerabilities in the administrative user interface in EMC M&R aka Watch4Net before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified field...