EMC vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2009-1120 EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.Critical 9.8 · Jan 15, 2020
• CVE-2018-1206 Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded databaHigh 7.8 · Mar 12, 2018
• CVE-2018-1182 An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deploymentsHigh 7.8 · Mar 8, 2018
• CVE-2017-15550 An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated DataHigh 8.8 · Jan 5, 2018
• CVE-2017-15549 An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated DataHigh 8.8 · Jan 5, 2018
• CVE-2017-15548 An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated DataCritical 9.8 · Jan 5, 2018
• CVE-2017-14385 An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data DoHigh 7.5 · Dec 20, 2017
• CVE-2017-14378 EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling VulnerabiCritical 10 · Nov 29, 2017
• CVE-2017-8020 An issue was discovered in EMC ScaleIO 2.0.1.x.Critical 9.8 · Nov 28, 2017
• CVE-2017-8019 An issue was discovered in EMC ScaleIO 2.0.1.x.High 7.5 · Nov 28, 2017
• CVE-2017-14376 EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise theHigh 7.8 · Oct 31, 2017
• CVE-2017-8022 An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4).High 8.1 · Oct 18, 2017
• CVE-2017-8025 RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability.High 7.4 · Oct 11, 2017
• CVE-2017-8018 EMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of service (DoS) vulnerability that could potentially be exploited by High 7.5 · Oct 2, 2017
• CVE-2017-8015 EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affectedCritical 9.8 · Sep 12, 2017
• CVE-2017-8004 The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.High 7.2 · Jul 17, 2017
• CVE-2017-8002 EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities.High 8.8 · Jul 9, 2017
• CVE-2017-4976 EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password.Critical 9.8 · Jul 9, 2017
• CVE-2017-4998 EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a cross-site request forgery vulnerability.High 8.8 · Jul 6, 2017
• CVE-2017-4990 In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feature of the system Critical 9.8 · Jun 21, 2017
• CVE-2017-4989 In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authCritical 9.8 · Jun 21, 2017
• CVE-2017-4988 EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attHigh 7.2 · Jun 21, 2017
• CVE-2017-4987 In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted fHigh 7.3 · Jun 19, 2017
• CVE-2017-4985 In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their pHigh 7.8 · Jun 19, 2017
• CVE-2017-4984 In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate tCritical 9.8 · Jun 19, 2017