Vulnerabilities > Dell > EMC Unity Operating Environment > High

DATE CVE VULNERABILITY TITLE RISK
2022-01-25 CVE-2021-36289 Information Exposure Through Log Files vulnerability in Dell EMC Unity Operating Environment
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability.
local
low complexity
dell CWE-532
7.8
2022-01-25 CVE-2021-36295 OS Command Injection vulnerability in Dell EMC Unity Operating Environment
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability.
network
low complexity
dell CWE-78
7.2
2022-01-25 CVE-2021-36296 OS Command Injection vulnerability in Dell EMC Unity Operating Environment
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability.
network
low complexity
dell CWE-78
7.2
2020-02-06 CVE-2020-5319 Improper Validation of Array Index vulnerability in Dell products
Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server.
network
low complexity
dell CWE-129
7.5
2019-07-18 CVE-2019-3741 Protection Mechanism Failure vulnerability in Dell products
Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability.
local
low complexity
dell CWE-693
7.8
2018-10-05 CVE-2018-11064 Incorrect Permission Assignment for Critical Resource vulnerability in Dell products
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability.
local
low complexity
dell CWE-732
7.8
2018-05-08 CVE-2018-1239 OS Command Injection vulnerability in Dell products
Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities.
network
low complexity
dell CWE-78
7.2