Browse CVEs

MEDIUM 5.8 CVE-2013-0939 EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 S… Documentum Records Manager Mitigation only Fix from $1,6002013-05-10 MEDIUM 5.8 CVE-2013-0937 Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Docum… Documentum Records Manager Mitigation only Fix from $1,6002013-05-10 HIGH 9.3 CVE-2013-0945 EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam… Avamar after 6.1.101-87 Fix from $1,9502013-05-03 HIGH 7.2 CVE-2013-0940 The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows lo… Networker after 7.6.5.2 Fix from $1,9502013-05-03 HIGH 9.3 CVE-2013-2717 Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) through 9.2 ha… Smarts Network Configuration Manager after 9.2 Fix from $1,9502013-03-28 HIGH 9.3 CVE-2013-0935 EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attacker… Smarts Network Configuration Manager after 9.1 Fix from $1,9502013-03-28 HIGH 7.5 CVE-2012-2292 The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the A… Rsa Archer Smartsuite Mitigation only Fix from $1,9502013-02-06 MEDIUM 6.8 CVE-2012-2294 EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to conduct clickjacking attacks via a crafted web… Rsa Archer Smartsuite Mitigation only Fix from $1,6002013-02-06 MEDIUM 6.5 CVE-2012-2293 Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users t… Rsa Archer Smartsuite Mitigation only Fix from $1,6002013-02-06 HIGH 7.6 CVE-2013-0930 Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors in… Alphastor Mitigation only Fix from $1,9502013-01-31 HIGH 9.3 CVE-2013-0928EPSS 34% The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitra… Alphastor No fix yet Fix from $1,9502013-01-21 HIGH 7.6 CVE-2013-0929 Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote atta… Alphastor Mitigation only Fix from $1,9502013-01-21 HIGH 7.2 CVE-2012-2291 EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions fo… Avamar Mitigation only Fix from $1,9502013-01-21 HIGH 9.3 CVE-2012-4607 Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbitrary code… Networker Mitigation only Fix from $1,9502013-01-17 MEDIUM 5.0 CVE-2012-4616 Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows rem… Data Protection Advisor Mitigation only Fix from $1,6002012-12-26 MEDIUM 6.8 CVE-2012-4608 Cross-site request forgery (CSRF) vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack … Rsa Netwitness Informer after 2.0.5.5 Fix from $1,6002012-12-05 HIGH 9.3 CVE-2012-4614 The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication for database access, which all… It Operations Intelligence after 9.0 Fix from $1,9502012-11-27 MEDIUM 6.9 CVE-2012-4613 EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user accou… Rsa Data Protection Manager Appliance Mitigation only Fix from $1,6002012-11-16 HIGH 9.3 CVE-2012-2290 The client in EMC NetWorker Module for Microsoft Applications (NMM) 2.2.1, 2.3 before build 122, and 2.4 before build 375 allows remote attackers to … Networker Module For Microsoft Applications Mitigation only Fix from $1,9502012-10-18 HIGH 8.5 CVE-2012-2287 The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003, when an… Rsa Authentication Agent Mitigation only Fix from $1,9502012-09-25 HIGH 9.3 CVE-2012-2288EPSS 33% Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers … Networker Mitigation only Fix from $1,9502012-09-04 MEDIUM 6.8 CVE-2012-2285 EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, allows rem… Cloud Tiering Appliance Virtual Edition after 9.0 Fix from $1,6002012-08-29 HIGH 7.5 CVE-2012-2289EPSS 5% EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any loc… Applicationxtender Desktop after 6.5 Fix from $1,9502012-08-26 MEDIUM 5.5 CVE-2012-2283 The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmw… Lifeline 3.2.3.15290+ Fix from $1,6002012-08-16 MEDIUM 6.5 CVE-2012-2282 EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR1 SP3.2) and 2.2 before 2.2.0… Celerra Network Server Mitigation only Fix from $1,6002012-07-16 MEDIUM 6.4 CVE-2012-2279 Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14… Rsa Authentication Manager after 7.1 Fix from $1,6002012-07-13 MEDIUM 5.0 CVE-2012-2280 EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frames, which allows remote attack… Rsa Authentication Manager after 7.1 Fix from $1,6002012-07-13 HIGH 9.3 CVE-2012-2515EPSS 28% Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help c… Captiva Quickscan Pro No fix yet Fix from $1,9502012-07-05 HIGH 7.5 CVE-2012-0409 Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly… Autostart Mitigation only Fix from $1,9502012-06-01 HIGH 7.8 CVE-2012-2276EPSS 9% The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial … Documentum Information Rights Management No fix yet Fix from $1,9502012-05-14