Isilon Onefs
Vendor:
First CVE: Mar 29, 2015 · Active for 11 years
15
Total CVEs
More Total CVEs than 92% of tracked products
3.8
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Isilon Onefs over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 29, 2015
11 years ago
Most Recent CVE
Sep 18, 2018
2,866 days ago
CVE Severity & Scoring
Isilon Onefs15 CVEs
40%
60%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local3 (20.0%)
Network9 (60.0%)
Unknown3 (20.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (66.7%)
High2 (13.3%)
Unknown3 (20.0%)
User Interaction
None9 (60.0%)
Unknown3 (20.0%)
Required3 (20.0%)
Privileges Required
Low2 (13.3%)
High5 (33.3%)
None5 (33.3%)
Unknown3 (20.0%)
Top CVEs
Signals from CVEs in this product scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-4525HIGH The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated | Jul 4, 2015 | 9.0 | 27 | NO | NO |
CVE-2018-11071HIGH Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to | Sep 18, 2018 | 7.5 | 24 | NO | NO |
CVE-2017-14380MEDIUM In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vu | Dec 13, 2017 | 6.7 | 23 | NO | NO |
CVE-2017-4988HIGH EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise | Jun 21, 2017 | 7.2 | 23 | NO | NO |
CVE-2016-9871HIGH EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that | Feb 3, 2017 | 7.2 | 23 | NO | NO |
CVE-2015-6848HIGH EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote | Nov 27, 2015 | 8.5 | 22 | NO | NO |
CVE-2017-14387MEDIUM The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings (including the NFS export security flavor for authentica | Dec 20, 2017 | 6.5 | 21 | NO | NO |
CVE-2015-4545HIGH EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creat | Dec 21, 2015 | 8.0 | 21 | NO | NO |
CVE-2017-8024MEDIUM EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability th | Oct 18, 2017 | 6.1 | 20 | NO | NO |
CVE-2017-4980HIGH EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected system. Affected versions are 7.1.0 - 7.1.1 | Mar 29, 2017 | 7.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (15 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (15 CVEs).
Media Mentions
Signals from CVEs in this product scope (15 CVEs).
Top CNAs Publishing CVEs For Isilon Onefs
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.1.0.0 | 2 | 6.6 | 0.6% | 0 | 0 |
| 8.0.1.1 | 2 | 6.6 | 0.6% | 0 | 0 |
| 8.0.1.0 | 4 | 6.9 | 0.9% | 0 | 0 |
| 8.0.0.4 | 2 | 6.6 | 0.6% | 0 | 0 |
| 8.0.0.3 | 3 | 6.8 | 1.0% | 0 | 0 |
| 8.0.0.2 | 4 | 6.9 | 0.9% | 0 | 0 |
| 8.0.0.1 | 5 | 7.0 | 1.2% | 0 | 0 |
| 8.0.0.0 | 7 | 6.8 | 1.1% | 0 | 0 |
| 7.2.1.6 | 1 | 6.1 | 0.6% | 0 | 0 |
| 7.2.1.5 | 2 | 6.4 | 0.5% | 0 | 0 |
| 7.2.1.4 | 3 | 6.7 | 0.9% | 0 | 0 |
| 7.2.1.3 | 6 | 7.0 | 1.3% | 0 | 0 |
| 7.2.1.2 | 8 | 6.8 | 1.1% | 0 | 0 |
| 7.2.1.1 | 9 | 6.8 | 1.1% | 0 | 0 |
| 7.2.1.0 | 11 | 7.0 | 1.2% | 0 | 0 |
| 7.2.0.5 | 3 | 6.7 | 0.4% | 0 | 0 |
| 7.2.0.4 | 6 | 7.0 | 1.2% | 0 | 0 |
| 7.2.0.3 | 6 | 7.0 | 1.2% | 0 | 0 |
| 7.2.0.2 | 9 | 7.3 | 1.3% | 0 | 0 |
| 7.2.0.1 | 9 | 7.4 | 1.3% | 0 | 0 |