All packages
EMC ViPR SRM vulnerabilities
3 known CVE vulnerabilities in EMC ViPR SRM, translated and rated.
- CVE-2016-6641High
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before version 3.7.2 allows remote authenticated users to inject arbitrary web scripts or HTML via unspecified vectors.
- CVE-2016-0891High
Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before version 3.7 allow remote attackers to hijack the authentication of administrators.
- CVE-2016-0922Critical
EMC ViPR SRM versions before 3.7.2 do not restrict the number of password-authentication attempts, making it easier for remote attackers to gain access via a brute-force guessing attack.