CVE-2016-6646

The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the 1 GetSymmCmdRequest or 2 RemoteServiceHandler class...

CVE-2016-6646

The CVE-2016-6646 entry concerns EMC Unisphere for VMAX Virtual Appliance (vApp Manager) and Solutions Enabler Virtual Appliance. Affects 8.x releases prior to 8.3.0 where the vApp Manager web application processes crafted input via GetSymmCmdRequest or RemoteServiceHandler classes, enabling remo...

CVE-2016-6647

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6647

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6647

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6647

EMC ViPR SRM is affected by a cross-site scripting (XSS) vulnerability in versions before 4.0.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The description does not specify the underlying root cause, affected components, or exact ex...

Dell / EMC Avamar Detection (HTTP)

HTTP based detection of Dell / EMC Avamar. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.106288...

EMC Avamar < 7.3.0-233 Multiple Vulnerabilities

EMC Avamar is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:emc:avamar"; if description...

EMC Documentum D2 4.5.x < 4.5 P15 / 4.6.x < 4.6 P03 r_object_id Handling Unauthenticated Document Disclosure (ESA-2016-108)

The remote host is running a version of EMC Documentum D2 that is 4.5.x prior to 4.5.0150 4.5 patch 15 or 4.6.x prior to 4.6.0030 4.6 patch 03. It is, therefore, affected by an information disclosure vulnerability due to improper validation of the 'robjectid' identifier. An unauthenticated, remot...

Code injection

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL...

CVE-2016-0918

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL...

CVE-2016-0918

CVE-2016-0918 affects EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15, and RSA Via Lifecycle and Governance before 7.0.0 P04. The vulnerability allows remote authenticated users to obtain User Detail Popup information via a modified URL. Connected documents ...

CVE-2016-0918

EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL...

Arbitrary Code Execution Vulnerability in Multiple EMC Products

EMC VNX2 File OE and others are hybrid storage platforms from EMC Corporation USA. A security vulnerability exists in the SMB server implementation of several EMC products, which can be exploited to execute arbitrary code and read or write files by sending a series of authentication requests...

CVE-2016-0925

Cross-site scripting XSS vulnerability in the Case Management application in EMC RSA Adaptive Authentication On-Premise before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote authenticated users to inject arbitrary web script or...

CVE-2016-0920

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration...

CVE-2016-0917

The SMB service in EMC VNXe VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638, VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra all supported versions does not prevent duplicate NTLM challenge-response...

CVE-2016-0904

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by...

CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...