Vipr Srm
Vendor:
First CVE: Jan 21, 2015 · Active for 11 years
10
Total CVEs
More Total CVEs than 89% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 29% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Vipr Srm over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 21, 2015
11 years ago
Most Recent CVE
Sep 30, 2016
3,588 days ago
CVE Severity & Scoring
Vipr Srm10 CVEs
10%
60%
20%
10%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (60.0%)
Unknown4 (40.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (60.0%)
High0 (0.0%)
Unknown4 (40.0%)
User Interaction
None1 (10.0%)
Unknown4 (40.0%)
Required5 (50.0%)
Privileges Required
Low2 (20.0%)
High0 (0.0%)
None4 (40.0%)
Unknown4 (40.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-0891HIGH Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators. | Apr 20, 2016 | 8.8 | 32 | NO | YES |
CVE-2015-0514MEDIUM EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access t | Jan 21, 2015 | 5.0 | 25 | NO | YES |
CVE-2016-0922CRITICAL EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing a | Sep 18, 2016 | 9.8 | 24 | NO | NO |
CVE-2015-0516MEDIUM Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL. | Jan 21, 2015 | 4.0 | 23 | NO | YES |
CVE-2016-6643MEDIUM Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Sep 18, 2016 | 6.1 | 21 | NO | NO |
CVE-2016-6641HIGH Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | Sep 18, 2016 | 7.6 | 19 | NO | NO |
CVE-2015-0515MEDIUM Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading an | Jan 21, 2015 | 6.5 | 18 | NO | NO |
CVE-2016-6642MEDIUM Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files. | Sep 18, 2016 | 6.1 | 17 | NO | NO |
CVE-2016-6647MEDIUM Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | Sep 30, 2016 | 5.4 | 16 | NO | NO |
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticate | Jan 21, 2015 | 3.5 | 13 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
30.0% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Vipr Srm
Top CWEs
Versions
No cataloged versions.