Emc

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-0899 1Emc 1Rsa Archer Egrc May 6, 2026 Jul 4, 2016 N/A· v4 6.3 MEDIUM· v3 3.5 LOW· v2 EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for...Show more EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.Show less
CVE-2016-0914 1Emc 4Documentum Administrator Documentum Capital ProjectsDocumentum Taskspace+1 more May 6, 2026 Jun 23, 2016 N/A· v4 6.3 MEDIUM· v3 6.5 MEDIUM· v2 EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6....Show more EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.Show less
CVE-2016-0916 1Emc 1Networker May 6, 2026 Jun 10, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance.
CVE-2016-0910 1Emc 1Data Domain Os May 6, 2026 Jun 10, 2016 N/A· v4 8.8 HIGH· v3 4.3 MEDIUM· v2 EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified...Show more EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors.Show less
CVE-2016-0908 1Emc 1Isilon Onefs May 6, 2026 Jun 4, 2016 N/A· v4 6.7 MEDIUM· v3 6.8 MEDIUM· v2 EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges.
CVE-2016-0907 1Emc 2Isilon Onefs Isilonsd Edge Onefs May 6, 2026 May 30, 2016 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle a...Show more EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115.Show less
CVE-2016-0902 1Emc 1Rsa Authentication Manager May 6, 2026 May 7, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVE-2016-0901 1Emc 1Rsa Authentication Manager May 6, 2026 May 7, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-201...Show more Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900.Show less
CVE-2016-0900 1Emc 1Rsa Authentication Manager May 6, 2026 May 7, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-201...Show more Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901.Show less
CVE-2016-0895 1Emc 1Rsa Data Loss Prevention May 6, 2026 May 3, 2016 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity.
CVE-2016-0894 1Emc 1Rsa Data Loss Prevention May 6, 2026 May 3, 2016 N/A· v4 6.3 MEDIUM· v3 6.5 MEDIUM· v2 EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter.
CVE-2016-0893 1Emc 1Rsa Data Loss Prevention May 6, 2026 May 3, 2016 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages.
CVE-2016-0892 1Emc 1Rsa Data Loss Prevention May 6, 2026 May 3, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-0891 1Emc 1Vipr Srm May 6, 2026 Apr 20, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators.
CVE-2016-0888 1Emc 1Documentum D2 May 6, 2026 Apr 7, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
CVE-2016-0886 1Emc 1Documentum Xcp May 6, 2026 Mar 9, 2016 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call.
CVE-2016-0882 1Emc 1Documentum Xcp May 6, 2026 Feb 12, 2016 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity refe...Show more EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2016-0881 1Emc 1Documentum Xcp May 6, 2026 Feb 12, 2016 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a que...Show more EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.Show less
CVE-2015-6852 1Emc 1Secure Remote Services May 6, 2026 Dec 28, 2015 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files via a crafted parameter.
CVE-2015-6850 1Emc 1Vplex Geosynchrony May 6, 2026 Dec 28, 2015 N/A· v4 8.4 HIGH· v3 7.2 HIGH· v2 EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.

Previous 1...678...21 Next