Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-09-30	CVE-2016-6647	Cross-site Scripting vulnerability in EMC Vipr SRM Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. network low complexity emc CWE-79	5.4
2016-09-18	CVE-2016-6643	Cross-site Scripting vulnerability in EMC Vipr SRM 3.6.0/3.6.4/3.7.1 Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network low complexity emc CWE-79	6.1
2016-09-18	CVE-2016-6642	Cross-Site Request Forgery (CSRF) vulnerability in EMC Vipr SRM 3.6.0/3.6.4/3.7.1 Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of administrators for requests that upload files. network low complexity emc CWE-352	6.1