Isilon Onefs
Approved changes feed: RSS · Atom
cpe:2.3:a:dell_emc:isilon_onefs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9) |
|---|---|
| Product | Isilon Onefs (49418919-3cac-5d49-acc5-97744fba818b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1213 |
vulnerable | 2026-06-08 05:11:17.200766 |
Details available
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.
Published: 2018-03-26T18:00:00.000Z
Updated: 2024-09-16T22:52:02.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1204 |
vulnerable | 2026-06-08 05:11:17.187358 |
Details available
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool. A malicious compadmin may potentially exploit this vulnerability to execute arbitrary code with root privileges.
Published: 2018-03-26T18:00:00.000Z
Updated: 2024-09-16T17:42:39.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1203 |
vulnerable | 2026-06-08 05:11:17.185365 |
Details available
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being run with sudo, may potentially be used by compadmin to execute arbitrary code with root privileges.
Published: 2018-03-26T18:00:00.000Z
Updated: 2024-09-16T19:20:35.231Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1202 |
vulnerable | 2026-06-08 05:11:17.184790 |
Details available
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
Published: 2018-03-26T18:00:00.000Z
Updated: 2024-09-17T00:11:13.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1201 |
vulnerable | 2026-06-08 05:11:17.184245 |
Details available
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
Published: 2018-03-26T18:00:00.000Z
Updated: 2024-09-17T03:24:01.982Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1189 |
vulnerable | 2026-06-08 05:11:17.143880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1188 |
vulnerable | 2026-06-08 05:11:17.143391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1187 |
vulnerable | 2026-06-08 05:11:17.142992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1186 |
vulnerable | 2026-06-08 05:11:17.141327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11071 |
vulnerable | 2026-06-08 05:10:37.833620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.