Vulnerabilities > Dell > EMC Unityvsa Operating Environment > High

DATE CVE VULNERABILITY TITLE RISK
2020-02-06 CVE-2020-5319 Improper Validation of Array Index vulnerability in Dell products
Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server.
network
low complexity
dell CWE-129
7.5
2019-07-18 CVE-2019-3741 Protection Mechanism Failure vulnerability in Dell products
Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability.
local
low complexity
dell CWE-693
7.8
2018-10-05 CVE-2018-11064 Incorrect Permission Assignment for Critical Resource vulnerability in Dell products
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability.
local
low complexity
dell CWE-732
7.8
2018-05-08 CVE-2018-1239 OS Command Injection vulnerability in Dell products
Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities.
network
low complexity
dell CWE-78
7.2