CVSS: 6.8EPSS: 0%CPEs: 11EXPL: 0CVE-2022-45103
https://notcve.org/view.php?id=CVE-2022-45103
18 Jan 2023 — Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to read arbitrary files on the underlying file system. Las versiones 9.2.3.x de Dell Unisphere para PowerMax vApp, VASA Provider vApp y Solution Enabler vApp versión 9.2.3.x contienen una vulnerabilidad de divulgación de información. Un atacante remoto con pocos privilegios podrí... • https://www.dell.com/support/kbdoc/en-us/000207177/dsa-2022-340-dell-unisphere-for-powermax-dell-unisphere-for-powermax-vapp-dell-solutions-enabler-vapp-dell-unisphere-360-dell-vasa-provider-vapp-and-dell-powermax-emb-mgmt-security-update-for-multiple-vulnerabilities • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.0EPSS: 0%CPEs: 8EXPL: 0CVE-2022-31233
https://notcve.org/view.php?id=CVE-2022-31233
31 Aug 2022 — Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. Unisphere for PowerMax versiones anteriores a 9.2.3.15, contienen una vulnerabilidad de escalada de privilegios. Un usuario malicioso adyacente puede explotar potencialmente esta vulnerabilidad para escalar sus privilegios y acceder a funcionalidades a las que no ... • https://www.dell.com/support/kbdoc/000200975 • CWE-602: Client-Side Enforcement of Server-Side Security CWE-669: Incorrect Resource Transfer Between Spheres •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2021-36339
https://notcve.org/view.php?id=CVE-2021-36339
21 Jan 2022 — The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance. Los dispositivos virtuales de Dell EMC versiones anteriores a 9.2.2.2, contienen cuentas de usuario no documentadas. Un usuario local malicioso puede explotar potencialmente esta vulnerabilidad para conseguir acceso privilegiado al dispositivo virtual • https://www.dell.com/support/kbdoc/000194640 • CWE-250: Execution with Unnecessary Privileges •
CVSS: 8.0EPSS: 0%CPEs: 13EXPL: 0CVE-2021-36338
https://notcve.org/view.php?id=CVE-2021-36338
21 Jan 2022 — Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338. Las versiones de Unisphere for PowerMax anteriores a la 9.2.2.2 contienen una vulnerabilidad de escalada de privilegios. Un usuario malintencionado adyacente podría explotar esta vulnerabilidad para e... • https://www.dell.com/support/kbdoc/000194640 • CWE-565: Reliance on Cookies without Validation and Integrity Checking CWE-602: Client-Side Enforcement of Server-Side Security •
CVSS: 8.1EPSS: 0%CPEs: 9EXPL: 0CVE-2021-21531
https://notcve.org/view.php?id=CVE-2021-21531
30 Apr 2021 — Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions. Dell Unisphere para PowerMax versiones anteriores a 9.2.1.6, contienen una vulnerabilidad de Omisión de Autorización. Un usuario malicioso local autenticado con role de monitor puede explotar esta vulnerabilidad para llevar a cabo acciones no autorizadas. • https://www.dell.com/support/kbdoc/000184565 • CWE-602: Client-Side Enforcement of Server-Side Security CWE-669: Incorrect Resource Transfer Between Spheres •
CVSS: 10.0EPSS: 3%CPEs: 4EXPL: 0CVE-2017-14375 – EMC Unisphere For VMAX vApp Manager ORBServlet Remote Credential Creation Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2017-14375
31 Oct 2017 — EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, and EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) contain an authentication bypass vulnerability that may potentially be exploited by malicious users to compromise the affected system. EMC Unisphere para VMAX Virtual Appliance (vApp... • http://seclists.org/fulldisclosure/2017/Oct/70 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 9.0EPSS: 1%CPEs: 10EXPL: 0CVE-2016-6645 – EMC Unisphere for VMAX Command Execution
https://notcve.org/view.php?id=CVE-2016-6645
04 Oct 2016 — The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute arbitrary code via crafted input to the (1) GeneralCmdRequest, (2) PersistantDataRequest, or (3) GetCommandExecRequest class. La aplicación web vApp Managers en EMC Unisphere para VMAX Virtual Appliance 8.x en versiones anteriores a 8.3.0 y Solutions Enabler Virtual Appliance 8.x en versiones anteriores a 8.3.0 pe... • http://seclists.org/bugtraq/2016/Oct/7 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 4%CPEs: 10EXPL: 0CVE-2016-6646 – EMC Unisphere for VMAX Command Execution
https://notcve.org/view.php?id=CVE-2016-6646
04 Oct 2016 — The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary code via crafted input to the (1) GetSymmCmdRequest or (2) RemoteServiceHandler class. La aplicación web vApp Managers en EMC Unisphere para VMAX Virtual Appliance 8.x en versiones anteriores a 8.3.0 y Solutions Enabler Virtual Appliance 8.x en versiones anteriores a 8.3.0 permite a atacantes remotos ejecutar códi... • http://seclists.org/bugtraq/2016/Oct/7 • CWE-20: Improper Input Validation •