Dell Emc Elastic Cloud Storage vulnerabilities

3 CVEs affecting Dell Emc Elastic Cloud Storage, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5386, published 2020-09-02.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3766, published 2019-09-27. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker may potentially perform a password…
• CVE-2020-5386, published 2020-09-02. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running…
• CVE-2020-5317, published 2020-02-06. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted…