Dell Emc Vasa Virtual Appliance vulnerabilities

2 CVEs affecting Dell Emc Vasa Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1216, published 2018-03-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1216, published 2018-03-08. Critical severity, CVSS 9.8. EPSS: 21.3% chance of exploitation in the next 30 days. A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX…
CVE-2018-1215, published 2018-03-08. High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days. An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX…