Emc Secure Remote Services

8 CVEs affecting Emc Secure Remote Services. Latest disclosed: 2018-10-18. Critical: 0, High: 1.

Top CVEs affecting Emc Secure Remote Services
CVESeverityScorePublishedSummary
CVE-2018-11080High7.32018-10-18Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configurati…
CVE-2018-11079Medium5.52018-10-18Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintex…
CVE-2017-4986Medium5.32017-06-14EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system.
CVE-2015-6852Medium4.32015-12-28Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users to read log files…
CVE-2015-05442015-07-05EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for re…
CVE-2015-05432015-07-05EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-midd…
CVE-2015-05252015-03-12The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands…
CVE-2015-05242015-03-12SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers t…