Vipr Srm Security Vulnerabilities and Issues — Vipr Srm CVE List

Lucene search

EmcVipr Srm

6 matches found

CVE•added 2016/04/20 5:59 p.m.•35 views

CVE-2016-0891

Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators.

8.8CVSS9AI score0.03087EPSS

CVE•added 2016/09/18 2:59 a.m.•32 views

CVE-2016-6641

Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

7.6CVSS6AI score0.00195EPSS

CVE•added 2016/09/30 12:59 a.m.•31 views

CVE-2016-6647

Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5AI score0.00178EPSS

CVE•added 2016/09/18 2:59 a.m.•30 views

CVE-2016-6643

Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS5.9AI score0.00223EPSS

CVE•added 2016/09/18 2:59 a.m.•29 views

CVE-2016-0922

EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack.

9.8CVSS9.1AI score0.00533EPSS

CVE•added 2016/09/18 2:59 a.m.•27 views

CVE-2016-6642

Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files.

6.1CVSS6.6AI score0.00073EPSS