Emc Data Domain OS vulnerabilities

2 CVEs affecting Emc Data Domain OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-14385, published 2017-12-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14385, published 2017-12-20. High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days. An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior…
CVE-2016-0910, published 2016-06-10. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary…