Vulnerabilities > Dell

DATE CVE VULNERABILITY TITLE RISK
2019-10-07 CVE-2019-3745 Untrusted Search Path vulnerability in Dell Encryption and Endpoint Security Suite Enterprise
The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise versions prior to 2.4.0.
local
low complexity
dell CWE-426
7.3
2019-09-30 CVE-2019-3733 Incomplete Cleanup vulnerability in multiple products
RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'.
network
low complexity
emc dell CWE-459
4.9
2019-09-30 CVE-2019-3732 Information Exposure Through Discrepancy vulnerability in multiple products
RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) versions prior to 4.1.6.1 (in 4.1.x) and versions prior to 4.3.3 (4.2.x and 4.3.x) are vulnerable to an Information Exposure Through Timing Discrepancy.
network
low complexity
emc dell CWE-203
7.5
2019-09-30 CVE-2019-3731 Information Exposure Through Discrepancy vulnerability in Dell products
RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy.
network
low complexity
dell CWE-203
7.5
2019-09-30 CVE-2019-3730 Information Exposure Through an Error Message vulnerability in Dell Bsafe Micro-Edition-Suite
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulnerability, also known as a “padding oracle attack vulnerability”.
network
low complexity
dell CWE-209
7.5
2019-09-30 CVE-2019-3729 Out-of-bounds Write vulnerability in Dell Bsafe Micro-Edition-Suite
RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature.
low complexity
dell CWE-787
2.4
2019-09-30 CVE-2019-3728 Out-of-bounds Read vulnerability in Dell products
RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 (in 4.0.x) and 4.1.4 (in 4.1.x) and RSA BSAFE Micro Edition Suite versions prior to 4.0.13 (in 4.0.x) and prior to 4.4 (in 4.1.x, 4.2.x, 4.3.x) are vulnerable to a Buffer Over-read vulnerability when processing DSA signature.
network
low complexity
dell CWE-125
7.5
2019-09-27 CVE-2019-3766 Improper Restriction of Excessive Authentication Attempts vulnerability in Dell EMC Elastic Cloud Storage
Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability.
network
low complexity
dell CWE-307
critical
9.8
2019-09-27 CVE-2019-3747 Cross-site Scripting vulnerability in Dell EMC Integrated Data Protection Appliance Firmware 2.0/2.1/2.2
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability.
network
low complexity
dell CWE-79
4.8
2019-09-27 CVE-2019-3746 Improper Restriction of Excessive Authentication Attempts vulnerability in Dell EMC Integrated Data Protection Appliance Firmware 2.0/2.1/2.2
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API.
network
low complexity
dell CWE-307
8.8