CVE-2018-1183

CVE-2018-1183 is an XXE injection vulnerability affecting a broad set of Dell EMC products (Unisphere for VMAX, Solutions Enabler VMAs, VASA/VNX/VNXe OE, ViPR SRM, XtremIO, Unity OE, and related components) caused by the XML parser configuration that processes external entities. In affected versi...

CVE-2017-14375

EMC CVE-2017-14375 is an authentication bypass vulnerability affecting multiple EMC appliances: Unisphere for VMAX Virtual Appliance vApp Manager, Solutions Enabler Virtual Appliance, VASA Provider Virtual Appliance, and VMAX eManagement. Affected versions (per sources) are: Unisphere vApp before...

CVE-2016-6645

The CVE-2016-6645 entry applies to EMC Unisphere for VMAX Virtual Appliance and Solutions Enabler Virtual Appliance 8.x prior to 8.3.0. The vulnerability stems from the vApp Manager’s web interface, where crafted input to GeneralCmdRequest, PersistantDataRequest, or GetCommandExecRequest allows a...

CVE-2016-6646

The CVE-2016-6646 entry concerns EMC Unisphere for VMAX Virtual Appliance (vApp Manager) and Solutions Enabler Virtual Appliance. Affects 8.x releases prior to 8.3.0 where the vApp Manager web application processes crafted input via GetSymmCmdRequest or RemoteServiceHandler classes, enabling remo...

CVE-2016-0889

The CVE concerns EMC Unisphere for VMAX Virtual Appliance, specifically the vApp Manager HTTP servlet. Affected: vApp Manager in EMC Unisphere for VMAX builds prior to 8.2.0. Root cause: an HTTP servlet vulnerability allows an attacker to write arbitrary files via a crafted pathname. Impact: enab...

CVE-2013-3287

EMC Unisphere for VMAX prior to version 1.6.1.6 is affected. If an unspecified level of LDAP debug logging is enabled, local users can read the LDAP bind password in cleartext from the console output. Remediation shown across sources: upgrade to Unisphere for VMAX 1.6.1.6 and/or change the LDAP b...