Emc Smarts Network Configuration Manager vulnerabilities

6 CVEs affecting Emc Smarts Network Configuration Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8017, published 2017-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2767, published 2017-02-03. Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days. EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x…
CVE-2013-0935, published 2013-03-28. High severity, CVSS 9.3. EPSS: 4.1% chance of exploitation in the next 30 days. EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified…
CVE-2017-2768, published 2017-02-03. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x…
CVE-2014-2509, published 2014-07-01. Medium severity, CVSS 5.4. EPSS: 1.6% chance of exploitation in the next 30 days. Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.
CVE-2013-2717, published 2013-03-28. High severity, CVSS 9.3. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) through 9.2 have unknown impact and attack vectors, a different…
CVE-2017-8017, published 2017-10-11. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to…