Skip to content
Noroxi

EMC records

415 published records for vendor emc.

Researcher profile

Entered KEV
0 · 0%
Weaponized
5 · 1.2%
Pre-auth RCE
51
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

415 records
  • CVE-2011-0647
    59Plan

    The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows re

    CriticalCVSS 10.0WeaponizedEPSS 64%

    emc · replication managerFeb 10, 2011

  • CVE-2018-1235
    52Plan

    Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    emc · recoverpointMay 29, 2018

  • CVE-2009-2754
    52Plan

    Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka por

    CriticalCVSS 10.0Proof of conceptEPSS 40%

    ibm · informix dynamic serverMar 5, 2010

  • CVE-2014-0644
    47Plan

    EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML

    HighCVSS 7.8WeaponizedEPSS 53%

    emc · cloud tiering appliance softwareApr 16, 2014

  • CVE-2013-0928
    47Plan

    The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execut

    CriticalCVSS 9.3WeaponizedEPSS 34%

    emc · alphastorJan 21, 2013

  • CVE-2012-2288
    47Plan

    Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote a

    CriticalCVSS 9.3WeaponizedEPSS 33%

    emc · networkerSep 4, 2012

  • CVE-2013-0946
    46Plan

    Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3Proof of conceptEPSS 29%

    emc · alphastorMay 10, 2013

  • CVE-2012-2515
    45Plan

    Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HT

    CriticalCVSS 9.3WeaponizedEPSS 28%

    emc · captiva quickscan proJul 4, 2012

  • CVE-2013-6810
    45Plan

    The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Ne

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    emc · connectrix managerDec 12, 2013

  • CVE-2008-3685
    44Plan

    Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, po

    CriticalCVSS 10.0No exploitEPSS 13%

    emc · documentum applicationxtender workflow managerOct 22, 2009

  • CVE-2010-0620
    43Plan

    Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attacker

    CriticalCVSS 9.3Proof of conceptEPSS 19%

    emc · homebase serverFeb 24, 2010

  • CVE-2011-2738
    43Plan

    Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and Cisco

    CriticalCVSS 10.0No exploitEPSS 11%

    cisco · unified service monitorSep 19, 2011

  • CVE-2011-1741
    42Plan

    Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum e

    CriticalCVSS 10.0No exploitEPSS 8%

    emc · documentum eroomJul 19, 2011

  • CVE-2008-5419
    42Plan

    Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attac

    CriticalCVSS 10.0No exploitEPSS 8%

    emc · control centerDec 10, 2008

  • CVE-2008-3684
    42Plan

    Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly

    CriticalCVSS 10.0No exploitEPSS 6%

    emc · documentum applicationxtenderOct 22, 2009

  • CVE-2009-1119
    42Plan

    Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via

    CriticalCVSS 10.0No exploitEPSS 5%

    emc · replistorApr 15, 2009

  • CVE-2007-5323
    42Plan

    The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value that causes RepliStor

    CriticalCVSS 10.0No exploitEPSS 5%

    emc · replistorOct 10, 2007

  • CVE-2016-0916
    41Plan

    EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute

    CriticalCVSS 9.8No exploitEPSS 8%

    emc · networkerJun 9, 2016

  • CVE-2017-4984
    41Plan

    In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may

    CriticalCVSS 9.8No exploitEPSS 7%

    emc · vnx2 firmwareJun 19, 2017

  • CVE-2017-2767
    41Plan

    EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.

    CriticalCVSS 9.8No exploitEPSS 6%

    emc · smarts network configuration managerFeb 3, 2017

  • CVE-2018-15764
    41Plan

    Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggere

    CriticalCVSS 9.8No exploitEPSS 5%

    emc · esrs policy managerSep 28, 2018

  • CVE-2009-0311
    41Plan

    The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a

    CriticalCVSS 10.0No exploitEPSS 5%

    emc · autostartJan 27, 2009

  • CVE-2006-3892
    41Plan

    The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allow

    CriticalCVSS 10.0No exploitEPSS 5%

    emc · networkerMar 2, 2007

  • CVE-2015-0545
    41Plan

    EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute

    CriticalCVSS 10.0No exploitEPSS 4%

    emc · unisphereJun 29, 2015

  • CVE-2015-0546
    41Plan

    EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid accou

    CriticalCVSS 10.0No exploitEPSS 3%

    emc · unified infrastructure manager\/provisioningJun 17, 2015