Vulnerabilities (CVE)

Filtered by vendor Emc Subscribe
Filtered by product Secure Remote Services
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-0525 1 Emc 1 Secure Remote Services 2019-02-01 7.5 HIGH N/A
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2015-0524 1 Emc 1 Secure Remote Services 2018-10-09 7.5 HIGH N/A
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-0543 1 Emc 1 Secure Remote Services 2016-12-28 5.8 MEDIUM N/A
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2015-0544 1 Emc 1 Secure Remote Services 2016-12-28 9.3 HIGH N/A
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.