Emc

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-3277 1Emc 1Rsa Archer Egrc Apr 29, 2026 Sep 5, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2013-3276 1Emc 1Rsa Archer Egrc Apr 29, 2026 Sep 5, 2013 N/A· v4 N/A· v3 6.0 MEDIUM· v2 EMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access restrictions and complete a login by leveraging a deactivated account.
CVE-2013-3271 1Emc 1Rsa Authentication Agent Apr 29, 2026 Aug 28, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote at...Show more EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack.Show less
CVE-2013-0943 1Emc 1Networker Apr 29, 2026 Jul 31, 2013 N/A· v4 N/A· v3 4.6 MEDIUM· v2 EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin.
CVE-2013-3275 1Emc 2Avamar Server Avamar Server Virtual Edition Apr 29, 2026 Jul 19, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive informa...Show more EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obtain sensitive information via a crafted web site, related to "cross frame scripting vulnerabilities."Show less
CVE-2013-3274 1Emc 2Avamar Server Avamar Server Virtual Edition Apr 29, 2026 Jul 19, 2013 N/A· v4 N/A· v3 9.0 HIGH· v2 EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to exec...Show more EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to execute arbitrary code via unspecified vectors.Show less
CVE-2013-3273 2Emc Rsa 2Authentication Manager Rsa Authentication Manager Apr 29, 2026 Jul 8, 2013 N/A· v4 N/A· v3 2.1 LOW· v2 EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users t...Show more EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file.Show less
CVE-2013-3272 1Emc 1Replication Manager Apr 29, 2026 Jul 8, 2013 N/A· v4 N/A· v3 2.1 LOW· v2 EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding...Show more EMC Replication Manager (RM) before 5.4.4 places encoded passwords in application log files, which makes it easier for local users to obtain sensitive information by reading a file and conducting an unspecified decoding attack.Show less
CVE-2013-0942 1Emc 1Rsa Authentication Agent Apr 29, 2026 May 22, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary we...Show more Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-3270 1Emc 2Celerra Control Station Vnx Control Station Apr 29, 2026 May 20, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group...Show more EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership.Show less
CVE-2013-0946 1Emc 1Alphastor Apr 29, 2026 May 10, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
CVE-2013-0939 1Emc 4Documentum Records Manager Documentum TaskspaceDocumentum Wdk+1 more Apr 29, 2026 May 10, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors i...Show more EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting" issue.Show less
CVE-2013-0938 1Emc 4Documentum Records Manager Documentum TaskspaceDocumentum Wdk+1 more Apr 29, 2026 May 10, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers...Show more Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-0937 1Emc 4Documentum Records Manager Documentum TaskspaceDocumentum Wdk+1 more Apr 29, 2026 May 10, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack...Show more Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors.Show less
CVE-2013-0934 1Emc 2Rsa Archer Egrc Rsa Archer Smartsuite Apr 29, 2026 May 7, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors.
CVE-2013-0933 1Emc 2Rsa Archer Egrc Rsa Archer Smartsuite Apr 29, 2026 May 7, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0932 1Emc 2Rsa Archer Egrc Rsa Archer Smartsuite Apr 29, 2026 May 7, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors.
CVE-2013-0945 1Emc 1Avamar Apr 29, 2026 May 3, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attack...Show more EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.Show less
CVE-2013-0944 1Emc 1Avamar Apr 29, 2026 May 3, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.
CVE-2013-0940 1Emc 1Networker Apr 29, 2026 May 3, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

Previous 1...141516...21 Next