CVE-2015-0513 describes multiple Cross-Site Scripting (XSS) vulnerabilities found in the administrative user interfaces of EMC M&R (Watch4Net) before version 6.5u1 and ViPR SRM before 3.6.1. These flaws allow authenticated users with privileged access to inject malicious web scripts or HTML by manipulating specific fields. The vulnerability has a CVSS score of 3.5 (Medium), indicating a network-based attack with medium complexity requiring authenticated access, primarily impacting integrity (data injection) without affecting confidentiality or availability. Its FAUCET Risk Score is low at 7/100. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. While there's limited community discussion and media coverage (one article), it is not listed in the CISA KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.5CPE matchmatch criteria | cpe:2.3:a:emc:watch4net:*:*:*:*:*:*:*:* | ||
<= 3.6.0CPE matchmatch criteria | cpe:2.3:a:emc:vipr_srm:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:S/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.