Priority MEDIUM 43
The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02165 · Published 2015-07-04 · No fix listed CWE-77
Priority MEDIUM 41
EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root p…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.01935 · Published 2015-11-27 · No fix listed CWE-284
Priority LOW 39
EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a lo…
CVSS 3.0HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.02219 · Published 2015-12-21 · No fix listed CWE-264
Priority LOW 37
Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vu…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01845 · Published 2018-09-18 · Fixed in 8.1.2 CWE-20
Priority LOW 37
EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected system.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02284 · Published 2017-03-29 · No fix listed CWE-22
Priority LOW 36
EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that could potentially be exploited by attac…
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01968 · Published 2017-02-03 · No fix listed CWE-264
Priority LOW 35
EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01687 · Published 2017-06-21 · No fix listed
Priority LOW 33
EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability.
CVSS 3.0HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.00827 · Published 2017-05-19 · No fix listed
Priority LOW 32
The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system fil…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00548 · Published 2015-03-29 · No fix listed CWE-264
Priority LOW 31
The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings (including the NFS export security flavor for authentication) that can be leveraged by current a…
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00914 · Published 2017-12-20 · No fix listed
Priority LOW 30
In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00352 · Published 2017-12-13 · No fix listed CWE-269
Priority LOW 30
EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentia…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00412 · Published 2017-01-23 · No fix listed CWE-90
Priority LOW 30
EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00387 · Published 2016-06-04 · No fix listed CWE-264
Priority LOW 28
EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malic…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00632 · Published 2017-10-18 · No fix listed CWE-79
Priority LOW 28
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle a…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00862 · Published 2016-05-30 · No fix listed CWE-254