Emc Esrs Policy Manager vulnerabilities

2 CVEs affecting Emc Esrs Policy Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15764, published 2018-09-28.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-15764, published 2018-09-28. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may…
• CVE-2017-4976, published 2017-07-09. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and…