CVE-2018-1251

Dell EMC Unity and UnityVSA (before 4.3.1.1525703027) have a URL Redirection vulnerability that could allow a remote unauthenticated attacker to redirect users to arbitrary URLs by prompting them to click a malicious Unisphere link. This could enable credential phishing or exposure of user creden...

CVE-2018-1250

The CVE-2018-1250 entry concerns Dell EMC Unity and UnityVSA prior to 4.3.1.1525703027, where an Authorization Bypass vulnerability allows a remotely authenticated user to read files on the NAS server by directly interacting with Unity OE APIs, bypassing role-based checks that apply only in the U...