Vplex Geosynchrony

vplex_geosynchrony

Vendor: Emc • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-6850 1Emc 1Vplex Geosynchrony May 6, 2026 Dec 28, 2015 N/A· v4 8.4 HIGH· v3 7.2 HIGH· v2 EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.
CVE-2015-6847 1Emc 1Vplex Geosynchrony May 6, 2026 Nov 18, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive information by reading this file.
CVE-2014-0635 1Emc 1Vplex Geosynchrony May 6, 2026 Apr 1, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.
CVE-2014-0634 1Emc 1Vplex Geosynchrony May 6, 2026 Apr 1, 2014 N/A· v4 N/A· v3 6.0 MEDIUM· v2 EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information vi...Show more EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.Show less
CVE-2014-0633 1Emc 1Vplex Geosynchrony May 6, 2026 Apr 1, 2014 N/A· v4 N/A· v3 7.7 HIGH· v2 The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstatio...Show more The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary code by leveraging an unattended workstation.Show less
CVE-2014-0632 1Emc 1Vplex Geosynchrony May 6, 2026 Apr 1, 2014 N/A· v4 N/A· v3 9.0 HIGH· v2 Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.