Emc Vipr Srm
10 CVEs affecting Emc Vipr Srm. Latest disclosed: 2016-09-30. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-0922 | Critical | 9.8 | 2016-09-18 | EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a b… |
CVE-2016-0891 | High | 8.8 | 2016-04-20 | Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authenticati… |
CVE-2016-6641 | High | 7.6 | 2016-09-18 | Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… |
CVE-2016-6643 | Medium | 6.1 | 2016-09-18 | Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2016-6642 | Medium | 6.1 | 2016-09-18 | Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for request… |
CVE-2016-6647 | Medium | 5.4 | 2016-09-30 | Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… |
CVE-2015-0516 | | 2015-01-21 | Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files v… | |
CVE-2015-0515 | | 2015-01-21 | Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary… | |
CVE-2015-0514 | | 2015-01-21 | EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging… | |
CVE-2015-0513 | | 2015-01-21 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allo… |