CVE-2016-0922

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack...

Authentication flaw

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files...

Cross site scripting

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0922

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack...

CVE-2016-6641

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6642

Cross-site request forgery CSRF vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files...

CVE-2016-6643

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0922

Affected product: EMC ViPR SRM (before 3.7.2). Issue: failure to limit password-authentication attempts, enabling brute-force guessing from remote attackers. Root cause/impact: lack of rate-limiting on authentication leads to potential unauthorized access; integrity and availability are not direc...

CVE-2016-6641

EMC ViPR SRM is affected by a cross-site scripting (XSS) vulnerability in versions prior to 3.7.2. Remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. The issue is documented across multiple sources (e.g., CNVD/NVD) and is fixed in version 3.7.2. Practical ...

CVE-2016-6642

Vulnerability: CSRF in EMC ViPR SRM prior to 3.7.2 allows remote attackers to hijack administrator authentication for file-upload requests. Affected product: EMC ViPR SRM (storage resource management software). Root cause / vector: Cross-site request forgery. No exploit details are provided in th...

CVE-2016-6643

CVE-2016-6643 affects EMC ViPR SRM before 3.7.2. It is a cross-site scripting (XSS) vulnerability that allows a remote attacker to inject arbitrary web script or HTML via unspecified vectors. The CNVD entry and CNVD-2016-07740 corroborate affected versions are prior to 3.7.2 and describe the impa...

CVE-2016-6643: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6641: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6642: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files...

CVE-2016-0922: Improper Authorization

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack...

PT-2016-4475

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description The issue allows remote attackers to gain access through a brute-force guessing attack due to the lack of restriction on the number of password-authentication attempts. Recommendations For...

PT-2016-7015

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that upload files. Recommendations For versions prior to 3.7.2, update to...

PT-2016-7014

Name of the Vulnerable Software and Affected Versions EMC ViPR SRM versions prior to 3.7.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...