Emc WATCH4NET vulnerabilities

5 CVEs affecting Emc WATCH4NET, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0516, published 2015-01-21.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0514, published 2015-01-21. Medium severity, CVSS 5.0. EPSS: 7.6% chance of exploitation in the next 30 days. EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a…
• CVE-2015-0516, published 2015-01-21. Medium severity, CVSS 4.0. EPSS: 7.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL.
• CVE-2015-0515, published 2015-01-21. Medium severity, CVSS 6.5. EPSS: 2.9% chance of exploitation in the next 30 days. Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an…
• CVE-2015-0513, published 2015-01-21. Low severity, CVSS 3.5. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject…
• CVE-2013-6181, published 2013-12-28. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges.