Approved changes feed: RSS · Atom

cpe:2.3:o:dell:emc_unity_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Unity Firmware (f1ae81bc-7655-57f4-b439-c96712732c6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1251 vulnerable 2026-06-08 05:11:17.261965 Details available
HIGH (8.3)
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect Unity users to arbitrary web URLs by tricking the victim user to click on a maliciously crafted Unisphere URL. Attacker could potentially phish information, including Unisphere users' credentials, from the victim once they are redirected.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-16T18:03:36.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1250 vulnerable 2026-06-08 05:11:17.260043 Details available
MEDIUM (6.5)
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based Authorization control implemented only in Unisphere GUI.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-17T04:04:33.853Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.