CVSS: 6.8EPSS: 0%CPEs: 11EXPL: 0CVE-2022-45103
https://notcve.org/view.php?id=CVE-2022-45103
18 Jan 2023 — Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system. Las versiones 9.2.3.x de Dell Unisphere para PowerMax vApp, VASA Provider vApp y Solution Enabler vApp versión 9.2.3.x contienen una vulnerabilidad de divulgación de información. Un atacante remoto con pocos privilegios podrí... • https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 1%CPEs: 27EXPL: 0CVE-2018-1183
https://notcve.org/view.php?id=CVE-2018-1183
30 Apr 2018 — In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual Appliance versions prior to 8.4.0.512, Dell EMC SMIS versions prior to 8.4.0.6, Dell EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4.0.347, Dell EMC VNX2 Operating Environment (OE) for File versions prior to 8.1.9.231, Dell EMC VNX2 Operating Environment (OE) for Block versions prior to 05.33.009.5.23... • http://seclists.org/fulldisclosure/2018/Apr/61 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 10.0EPSS: 5%CPEs: 1EXPL: 0CVE-2017-4997 – EMC VMAX3 VASA Provider UploadConfigurator Unrestricted File Upload Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-4997
29 Jun 2017 — EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentially be exploited by malicious users to compromise the affected system. Las versiones 8.3.x y anteriores de EMC VASA Provider Virtual Appliance contienen una vulnerabilidad de ejecución remota de código no autenticado que podría ser explotada por usuarios maliciosos con el fin de comprometer el sistema afectado. This vulnerability allows remote attackers to create arbitra... • http://www.securityfocus.com/archive/1/540783/30/0/threaded • CWE-20: Improper Input Validation •