EM
Vendor
Emc
553
CVEs
0
On KEV
0
New 30D
Products
RA7.2
Rsa Authentication Manager
Emc
25 CVEs0 on KEV0 new
RA8.8
Rsa Archer Egrc
Emc
23 CVEs0 on KEV0 new
DC–
Documentum Content Server
Emc
21 CVEs0 on KEV0 new
NE9.8
Networker
Emc
20 CVEs0 on KEV0 new
IO8.0
Isilon Onefs
Emc
15 CVEs0 on KEV0 new
AS9.8
Avamar Server
Emc
13 CVEs0 on KEV0 new
DW6.3
Documentum Webtop
Emc
13 CVEs0 on KEV0 new
DD8.8
Documentum D2
Emc
12 CVEs0 on KEV0 new
DT6.3
Documentum Taskspace
Emc
12 CVEs0 on KEV0 new
RI7.8
Rsa Identity Management And Governance
Emc
11 CVEs0 on KEV0 new
AV8.8
Avamar
Emc
10 CVEs0 on KEV0 new
DA6.3
Documentum Administrator
Emc
10 CVEs0 on KEV0 new
DW–
Documentum Wdk
Emc
10 CVEs0 on KEV0 new
RA5.4
Rsa Adaptive Authentication On-premise
Emc
10 CVEs0 on KEV0 new
VS9.8
Vipr Srm
Emc
10 CVEs0 on KEV0 new
DP9.8
Data Protection Advisor
Emc
9 CVEs0 on KEV0 new
RI8.8
Rsa Identity Governance And Lifecycle
Emc
8 CVEs0 on KEV0 new
SR7.8
Secure Remote Services
Emc
8 CVEs0 on KEV0 new
DE9.8
Documentum Eroom
Emc
7 CVEs0 on KEV0 new
LN–
Legato Networker
Emc
7 CVEs0 on KEV0 new
RE9.8
Recoverpoint
Emc
7 CVEs0 on KEV0 new
RA–
Rsa Archer Smartsuite
Emc
7 CVEs0 on KEV0 new
DS–
Document Sciences Xpression
Emc
6 CVEs0 on KEV0 new
DD–
Documentum Digital Asset Manager
Emc
6 CVEs0 on KEV0 new
SN9.8
Smarts Network Configuration Manager
Emc
6 CVEs0 on KEV0 new
VG8.4
Vplex Geosynchrony
Emc
6 CVEs0 on KEV0 new
AP9.8
Appsync
Emc
5 CVEs0 on KEV0 new
DC6.3
Documentum Capital Projects
Emc
5 CVEs0 on KEV0 new
DW–
Documentum Web Publisher
Emc
5 CVEs0 on KEV0 new
RF9.8
Recoverpoint For Virtual Machines
Emc
5 CVEs0 on KEV0 new
RM9.8
Replication Manager
Emc
5 CVEs0 on KEV0 new
RC7.5
Rsa Certificate Manager
Emc
5 CVEs0 on KEV0 new
RD6.3
Rsa Data Loss Prevention
Emc
5 CVEs0 on KEV0 new
SC9.8
Scaleio
Emc
5 CVEs0 on KEV0 new
WA–
Watch4net
Emc
5 CVEs0 on KEV0 new
AL–
Alphastor
Emc
4 CVEs0 on KEV0 new
AU–
Autostart
Emc
4 CVEs0 on KEV0 new
AS8.4
Avamar Server Virtual Edition
Emc
4 CVEs0 on KEV0 new
DR–
Documentum Records Manager
Emc
4 CVEs0 on KEV0 new
RE–
Replistor
Emc
4 CVEs0 on KEV0 new
RA–
Rsa Authentication Agent
Emc
4 CVEs0 on KEV0 new
RS9.1
Rsa Security Analytics
Emc
4 CVEs0 on KEV0 new
SE–
Sourceone Email Supervisor
Emc
4 CVEs0 on KEV0 new
CT–
Cloud Tiering Appliance
Emc
3 CVEs0 on KEV0 new
DI9.8
Diskxtender
Emc
3 CVEs0 on KEV0 new
DX6.5
Documentum Xcp
Emc
3 CVEs0 on KEV0 new
ID9.8
Integrated Data Protection Appliance
Emc
3 CVEs0 on KEV0 new
NM9.8
Networker Module For Microsoft Applications
Emc
3 CVEs0 on KEV0 new
RA–
Rsa Archer Grc
Emc
3 CVEs0 on KEV0 new
RB–
Rsa Bsafe Ssl-j
Emc
3 CVEs0 on KEV0 new
RD–
Rsa Data Protection Manager Appliance
Emc
3 CVEs0 on KEV0 new
RR–
Rsa Registration Manager
Emc
3 CVEs0 on KEV0 new
RS–
Rsa Security Sitekey
Emc
3 CVEs0 on KEV0 new
SE9.8
Solutions Enabler
Emc
3 CVEs0 on KEV0 new
SE–
Sourceone Email Management
Emc
3 CVEs0 on KEV0 new
UN9.8
Unisphere
Emc
3 CVEs0 on KEV0 new
VF9.8
Vnx1 Firmware
Emc
3 CVEs0 on KEV0 new
VF9.8
Vnx2 Firmware
Emc
3 CVEs0 on KEV0 new
AG7.4
Archer Grc Platform
Emc
2 CVEs0 on KEV0 new
AT–
Atmos
Emc
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-0454 | EM Elan Match-on-chip Fpr Solution Firmware Emc | 6.1 | Jan 12 | ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor |
| CVE-2023-32458 | AP Appsync Emc | 7.8 | Sep 27 | Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Service Enabler component |
| CVE-2020-5346 | RA Rsa Authentication Manager Emc | 4.8 | Apr 15 | RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console |
| CVE-2020-5340 | RA Rsa Authentication Manager Emc | 4.8 | Mar 26 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console |
| CVE-2020-5339 | RA Rsa Authentication Manager Emc | 4.8 | Mar 26 | RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the Security Console |
| CVE-2019-3768 | RA Rsa Authentication Manager Emc | 6.5 | Jan 3 | RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability |
| CVE-2019-18574 | RA Rsa Authentication Manager Emc | 4.8 | Dec 3 | RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console |
| CVE-2019-3733 | RB Rsa Bsafe Crypto-c Emc | 4.9 | Sep 30 | RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as… |
| CVE-2019-3732 | RB Rsa Bsafe Crypto-c Emc | 7.5 | Sep 30 | RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x)… |
| CVE-2019-3711 | RA Rsa Authentication Manager Emc | 7.2 | Mar 13 | DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability |
| CVE-2018-15771 | RE Recoverpoint Emc | 5.5 | Nov 13 | Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability |
| CVE-2018-11080 | SR Secure Remote Services Emc | 7.8 | Oct 18 | Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities |
| CVE-2018-11079 | SR Secure Remote Services Emc | 7.8 | Oct 18 | Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability |
| CVE-2018-15764 | EP Esrs Policy Manager Emc | 9.8 | Sep 28 | Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services |
| CVE-2018-11075 | RA Rsa Authentication Manager Emc | 4.7 | Sep 28 | RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page |
| CVE-2018-11074 | RA Rsa Authentication Manager Emc | 6.1 | Sep 28 | RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files |
| CVE-2018-11073 | RA Rsa Authentication Manager Emc | 4.8 | Sep 28 | RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console |
| CVE-2018-11071 | IO Isilon Onefs Emc | 7.5 | Sep 18 | Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior… |
| CVE-2018-11061 | RN Rsa Netwitness Emc | 9.1 | Aug 24 | RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to… |
| CVE-2018-1255 | RI Rsa Identity Governance And Lifecycle Emc | 6.1 | Jul 13 | RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability |
| CVE-2018-1245 | RI Rsa Identity Governance And Lifecycle Emc | 8.8 | Jul 13 | RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM) |
| CVE-2018-11049 | RI Rsa Identity Governance And Lifecycle Emc | 7.3 | Jul 11 | RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability |
| CVE-2018-11051 | RC Rsa Certificate Manager Emc | 7.5 | Jul 3 | RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server |
| CVE-2018-1254 | RA Rsa Authentication Manager Emc | 6.1 | Jun 21 | RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability |
| CVE-2018-1253 | RA Rsa Authentication Manager Emc | 6.1 | Jun 21 | RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability |
| CVE-2018-1242 | RE Recoverpoint Emc | 6.5 | May 29 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contains a command injection vulnerability in the Boxmgmt CLI |
| CVE-2018-1241 | RE Recoverpoint Emc | 8.8 | May 29 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the… |
| CVE-2018-1235 | RE Recoverpoint Emc | 9.8 | May 29 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability |
| CVE-2018-1240 | VC Vipr Controller Emc | 8.0 | Apr 18 | Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP |
| CVE-2017-8013 | DP Data Protection Advisor Emc | 9.8 | Mar 16 | EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges |
| CVE-2018-1206 | DP Data Protection Advisor Emc | 7.8 | Mar 12 | Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with… |
| CVE-2018-1220 | RA Rsa Archer Emc | 6.1 | Mar 8 | EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature |
| CVE-2018-1219 | RA Rsa Archer Emc | 4.3 | Mar 8 | EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information |
| CVE-2018-1182 | RI Rsa Identity Governance And Lifecycle Emc | 7.8 | Mar 8 | An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via… |
| CVE-2017-15546 | RA Rsa Authentication Manager Emc | 4.3 | Jan 25 | The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability |
| CVE-2017-15550 | AS Avamar Server Emc | 8.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… |
| CVE-2017-15549 | ID Integrated Data Protection Appliance Emc | 8.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… |
| CVE-2017-15548 | NE Networker Emc | 9.8 | Jan 5 | An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection… |
| CVE-2017-14387 | IO Isilon Onefs Emc | 6.5 | Dec 20 | The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings (including the NFS export security flavor for… |
| CVE-2017-14385 | DD Data Domain Emc | 7.5 | Dec 20 | An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1… |
| CVE-2017-14380 | IO Isilon Onefs Emc | 6.7 | Dec 13 | In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a… |
| CVE-2017-14378 | RA Rsa Authentication Agent Api For C Emc | 10.0 | Nov 29 | EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "Error Handling Vulnerability." |
| CVE-2017-8020 | SC Scaleio Emc | 9.8 | Nov 28 | An issue was discovered in EMC ScaleIO 2.0.1.x |
| CVE-2017-8019 | SC Scaleio Emc | 7.5 | Nov 28 | An issue was discovered in EMC ScaleIO 2.0.1.x |
| CVE-2017-14379 | RA Rsa Authentication Manager Emc | 5.4 | Nov 28 | EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system |
| CVE-2017-14376 | AP Appsync Emc | 7.8 | Nov 1 | EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system |
| CVE-2017-14375 | SE Solutions Enabler Emc | 9.8 | Nov 1 | EMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions… |
| CVE-2017-14373 | RA Rsa Authentication Manager Emc | 6.1 | Oct 31 | EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise… |
| CVE-2017-10955 | DP Data Protection Advisor Emc | 8.8 | Oct 19 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0 |
| CVE-2017-8022 | NE Networker Emc | 8.1 | Oct 18 | An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4) |
| CVE-2017-8024 | IO Isilon Onefs Emc | 6.1 | Oct 18 | EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability… |
| CVE-2017-8025 | AG Archer Grc Platform Emc | 7.4 | Oct 11 | RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability |
| CVE-2017-8017 | SN Smarts Network Configuration Manager Emc | 6.1 | Oct 11 | EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by… |
| CVE-2017-8016 | AG Archer Grc Platform Emc | 5.4 | Oct 11 | RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field |
| CVE-2017-8018 | AP Appsync Emc | 7.5 | Oct 3 | EMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of service (DoS) vulnerability that could potentially be exploited by malicious users to… |
| CVE-2017-8015 | AP Appsync Emc | 9.8 | Sep 12 | EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by malicious users to compromise the affected system |
| CVE-2017-3757 | ET Elan Touchpad Driver Emc | 7.8 | Aug 29 | An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads) |
| CVE-2017-8006 | RA Rsa Authentication Manager Emc | 5.9 | Jul 17 | In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute… |
| CVE-2017-8005 | RI Rsa Identity Governance And Lifecycle Emc | 5.4 | Jul 17 | The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch… |
| CVE-2017-8004 | RI Rsa Identity Governance And Lifecycle Emc | 7.2 | Jul 17 | The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch… |
