Emc

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-0546 1Emc 1Unified Infrastructure Manager/provisioning May 6, 2026 Jun 17, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name.
CVE-2015-0540 1Emc 1Document Sciences Xpression May 6, 2026 May 25, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-0538 1Emc 1Autostart May 6, 2026 May 7, 2015 N/A· v4 N/A· v3 9.3 HIGH· v2 ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets.
CVE-2015-0531 1Emc 1Sourceone Email Management May 6, 2026 May 7, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
CVE-2015-0532 1Emc 1Rsa Identity Management And Governance May 6, 2026 May 1, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an...Show more EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account.Show less
CVE-2015-0530 1Emc 1Networker May 6, 2026 Apr 17, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.
CVE-2015-0529 1Emc 1Powerpath Virtual Appliance May 6, 2026 Apr 5, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a log...Show more EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.Show less
CVE-2015-0528 1Emc 1Isilon Onefs May 6, 2026 Mar 29, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system fil...Show more The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system files.Show less
CVE-2015-0527 1Emc 1Documentum Xcelerated Management System May 6, 2026 Mar 24, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 EMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform (xCP) provisioning, which allow...Show more EMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform (xCP) provisioning, which allows local users to obtain sensitive information by reading a file.Show less
CVE-2015-0525 1Emc 1Secure Remote Services May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2015-0524 1Emc 1Secure Remote Services May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-0523 1Emc 2Rsa Certificate Manager Rsa Registration Manager May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message...Show more EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header.Show less
CVE-2015-0522 1Emc 2Rsa Certificate Manager Rsa Registration Manager May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers to inject arbitrary web script or HTML vi...Show more Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers to inject arbitrary web script or HTML via vectors related to the email address parameter.Show less
CVE-2015-0521 1Emc 2Rsa Certificate Manager Rsa Registration Manager May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote authenticated users to inject arbitrary web script...Show more Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter.Show less
CVE-2015-0519 1Emc 1Captiva Capture May 6, 2026 Feb 14, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain...Show more The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file.Show less
CVE-2015-0518 1Emc 1Documentum D2 May 6, 2026 Feb 14, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspec...Show more The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.Show less
CVE-2015-0517 1Emc 1Documentum D2 May 6, 2026 Feb 14, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain se...Show more The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.Show less
CVE-2015-0512 1Emc 1Unisphere Central May 6, 2026 Feb 2, 2015 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.
CVE-2015-0516 1Emc 2Vipr Srm Watch4net May 6, 2026 Jan 21, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL.
CVE-2015-0515 1Emc 2Vipr Srm Watch4net May 6, 2026 Jan 21, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.

Previous 1...91011...21 Next