Approved changes feed: RSS · Atom

cpe:2.3:o:dell:emc_vnx2_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Vnx2 Firmware (46089362-7859-522a-afc4-e173f13c65b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3704 vulnerable 2026-06-08 05:13:55.392539 Details available
HIGH (7.8)
VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this vulnerability.
Published: 2019-02-07T19:00:00.000Z
Updated: 2024-09-16T17:58:08.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14383 vulnerable 2026-06-08 05:08:49.854602 Details available
In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary HTML code in the user's browser session in the context of the affected web application.
Published: 2018-01-04T06:00:00.000Z
Updated: 2024-08-05T19:27:40.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.