Emc Secure Remote Services — known CVE vulnerabilities

Every CVE whose affected-product data names Emc Secure Remote Services, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2015-0544 — CVSS 9.3 (critical): EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which…
• CVE-2015-0525 — CVSS 7.5 (high): The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute…
• CVE-2015-0524 — CVSS 7.5 (high): SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03…
• CVE-2018-11080 — CVSS 7.3 (high): Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains…
• CVE-2015-0543 — CVSS 5.8 (medium): EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which…
• CVE-2018-11079 — CVSS 5.5 (medium): Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials…
• CVE-2017-4986 — CVSS 5.3 (medium): EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the…
• CVE-2015-6852 — CVSS 4.3 (medium): Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated…