337
CVEs
52
Critical
89
High
0
KEV
17
PoC
138
Unpatched C/H
2.1%
Patch Rate
2.6%
Avg EPSS
Severity Breakdown
CRITICAL
52
HIGH
89
MEDIUM
171
LOW
25
Monthly CVE Trend
Affected Products (30)
Rsa Archer Egrc
23
Rsa Authentication Manager
23
Documentum Content Server
20
Isilon Onefs
15
Rsa
15
Documentum Webtop
12
Documentum D2
12
Documentum Taskspace
12
Rsa Identity Management And Governance
11
Networker
11
Avamar Server
10
Documentum Wdk
10
Vipr Srm
10
Documentum Administrator
9
Open Redirect
9
Authentication Manager
9
Secure Remote Services
8
Recoverpoint For Virtual Machines
8
Rsa Identity Governance And Lifecycle
8
Data Protection Advisor
7
Recoverpoint
7
Rsa Archer Smartsuite
7
Rsa Via Lifecycle And Governance
7
Java
7
Documentum Digital Asset Manager
6
Avamar
6
Vplex Geosynchrony
6
Document Sciences Xpression
6
Smarts Network Configuration Manager
6
Rsa Adaptive Authentication On Premise
6
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2013-0928 | The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 78.7%. | CRITICAL | 9.3 | 78.7% | 160 |
PoC
No patch
|
| CVE-2012-2288 | Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 69.9%. | CRITICAL | 9.3 | 69.9% | 151 |
PoC
No patch
|
| CVE-2012-2515 | Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 64.8%. | CRITICAL | 9.3 | 64.8% | 146 |
PoC
No patch
|
| CVE-2013-6810 | The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 64.8%. | CRITICAL | 10.0 | 64.8% | 135 |
PoC
No patch
|
| CVE-2014-0644 | EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.0%. | HIGH | 7.8 | 74.0% | 133 |
PoC
No patch
|
| CVE-2013-0946 | Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 56.4%. | CRITICAL | 9.3 | 56.4% | 123 |
PoC
No patch
|
| CVE-2017-10955 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 33.5% and no vendor patch available. | HIGH | 8.8 | 33.5% | 77 |
No patch
|
| CVE-2012-2277 | The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (pvcontrol.exe process hang) via \n. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 17.0%. | HIGH | 7.8 | 17.0% | 76 |
PoC
No patch
|
| CVE-2012-0406 | The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 11.8%. | HIGH | 7.8 | 11.8% | 71 |
PoC
No patch
|
| CVE-2018-1235 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 43.3% | 69 |
PoC
No patch
|
| CVE-2012-2276 | The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 9.9% | 69 |
PoC
No patch
|
| CVE-2016-0891 | Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 3.1% | 67 |
PoC
No patch
|
| CVE-2015-0514 | EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 18.3%. | MEDIUM | 5.0 | 18.3% | 63 |
PoC
No patch
|
| CVE-2015-0516 | Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%. | MEDIUM | 4.0 | 21.4% | 61 |
PoC
No patch
|
| CVE-2017-2767 | EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Configuration Manager (NCM) 9.4.2.x. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 10.8% and no vendor patch available. | CRITICAL | 9.8 | 10.8% | 60 |
No patch
|