VG
Product
Vplex Geosynchrony
6
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Vplex Geosynchrony to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-6850 | 8.4 | Dec 28 | EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login… Affected: 5.4; 5.5 |
| CVE-2015-6847 | – | Nov 18 | The default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE GUI passwords in a log file, which allows local users to obtain sensitive… Affected: 5.4 |
| CVE-2014-0635 | – | Apr 1 | Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors Affected: 4.0; 5.0; 5.1; 5.2; 5.2.1 |
| CVE-2014-0634 | – | Apr 1 | EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to… Affected: 4.0; 5.0; 5.1; 5.2; 5.2.1 |
| CVE-2014-0633 | – | Apr 1 | The GUI in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not properly validate session-timeout values, which might make it easier for remote attackers to execute arbitrary… Affected: 4.0; 5.0; 5.1; 5.2; 5.2.1 |
| CVE-2014-0632 | – | Apr 1 | Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors Affected: 4.0; 5.0; 5.1; 5.2; 5.2.1 |
Showing 6