Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Priority LOW 30

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00352 Published 2017-12-13 No fix listed CWE-269
Priority LOW 28

EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malic…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00632 Published 2017-10-18 No fix listed CWE-79
Priority LOW 36

EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a privilege escalation vulnerability that could potentially be exploited by attac…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01968 Published 2017-02-03 No fix listed CWE-264
TI-2016-07999 CVE-2016-9870 · GHSA-8p37-98j5-xm75

LDAP injection in EMC Isilon OneFS

Priority LOW 30

EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentia…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00412 Published 2017-01-23 No fix listed CWE-90
Priority LOW 39

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a lo…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.02219 Published 2015-12-21 No fix listed CWE-264
Priority MEDIUM 41

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root p…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01935 Published 2015-11-27 No fix listed CWE-284
Priority MEDIUM 43

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02165 Published 2015-07-04 No fix listed CWE-77