Priority MEDIUM 45
Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01387 · Published 2020-03-06 · Fixed in 8.2.0 CWE-306
Priority MEDIUM 42
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01932 · Published 2018-03-26 · No fix listed CWE-352
Priority MEDIUM 40
Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01152 · Published 2020-07-06 · No fix listed CWE-732
Priority MEDIUM 40
Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01214 · Published 2020-09-02 · Fixed in 8.1.2, 8.2.2 +1 CWE-732
Priority MEDIUM 40
The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System (NFS) allows access to an 'admin' home directory.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00991 · Published 2021-07-29 · Fixed in All supported CWE-276
Priority LOW 39
Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00593 · Published 2021-07-28 · Fixed in OneFS 8.1.2, 8.2.2 +1 CWE-276
Priority LOW 35
Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00985 · Published 2020-05-20 · Fixed in 8.2.2 CWE-341
Priority LOW 35
Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00985 · Published 2020-05-20 · Fixed in 8.2.2 CWE-201
Priority LOW 35
Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01044 · Published 2020-04-03 · Fixed in 8.2.2 CWE-400
Priority LOW 35
Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01126 · Published 2020-02-06 · No fix listed CWE-285
Priority LOW 34
Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance mode cluster.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00258 · Published 2021-01-05 · Fixed in 8.1.2, 8.2.2 +1 CWE-269
Priority LOW 34
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.02319 · Published 2018-03-26 · No fix listed CWE-22
Priority LOW 34
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.02107 · Published 2018-03-26 · No fix listed CWE-732
Priority LOW 21
The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00478 · Published 2022-10-21 · Fixed in 8.2.2 CWE-276