Dell Emc Unisphere vulnerabilities

6 CVEs affecting Dell Emc Unisphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1183, published 2018-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6646, published 2016-10-05. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary…
CVE-2017-14375, published 2017-11-01. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512,…
CVE-2016-6645, published 2016-10-05. High severity, CVSS 8.8. EPSS: 3.6% chance of exploitation in the next 30 days. The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute…
CVE-2016-0889, published 2016-04-15. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.
CVE-2018-1183, published 2018-04-30. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual Appliance versions…
CVE-2013-3287, published 2013-11-02. Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days. EMC Unisphere for VMAX before 1.6.1.6, when using an unspecified level of debug logging in LDAP configurations, allows local users to discover the cleartext LDAP bind password by reading the console.