Emc Unisphere vulnerabilities

3 CVEs affecting Emc Unisphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6646, published 2016-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6646, published 2016-10-05. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote attackers to execute arbitrary…
CVE-2015-0545, published 2015-06-29. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6645, published 2016-10-05. High severity, CVSS 8.8. EPSS: 3.6% chance of exploitation in the next 30 days. The vApp Managers web application in EMC Unisphere for VMAX Virtual Appliance 8.x before 8.3.0 and Solutions Enabler Virtual Appliance 8.x before 8.3.0 allows remote authenticated users to execute…