Read the docs

EMC

Records414All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical79CVSS 9.0–10.0
CVSS high111CVSS 7.0–8.9

Exploited now

EMC records in CISA KEV

No EMC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

15 records in Isilon Onefs · all components

Priority MEDIUM 43

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02165 Published 2015-07-04 No fix listed CWE-77
Priority MEDIUM 41

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root p…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01935 Published 2015-11-27 No fix listed CWE-284
Priority LOW 39

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a lo…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.02219 Published 2015-12-21 No fix listed CWE-264
Priority LOW 36

EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that could potentially be exploited by attac…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01968 Published 2017-02-03 No fix listed CWE-264
Priority LOW 30

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00352 Published 2017-12-13 No fix listed CWE-269
TI-2016-07999 CVE-2016-9870 · GHSA-8p37-98j5-xm75

LDAP injection in EMC Isilon OneFS

Priority LOW 30

EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentia…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00412 Published 2017-01-23 No fix listed CWE-90
Priority LOW 28

EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malic…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00632 Published 2017-10-18 No fix listed CWE-79
Open these records in search →