CVE-2017-4976

EMC ESRS Policy Manager before version 6.8 contains an undocumented OpenDS admin account with a default password. A remote attacker who knows the default password can log in and gain administrator privileges on the local LDAP server. A remediation is available in EMC Security Remote Services Poli...

CVE-2018-15764

Dell EMC ESRS Policy Manager is vulnerable to remote code execution in versions 6.8 and earlier due to improper configurations of triggered JMX services. An unauthenticated remote attacker could potentially execute arbitrary code in the server’s JVM. The connected documents provide the affected p...