Approved changes feed: RSS · Atom

cpe:2.3:h:dell:emc_unity:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductEmc Unity (fd2ffb98-b565-5a1c-879a-df3a06d9ce34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1251 not_vulnerable 2026-06-08 05:11:17.267376 Details available
HIGH (8.3)
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect Unity users to arbitrary web URLs by tricking the victim user to click on a maliciously crafted Unisphere URL. Attacker could potentially phish information, including Unisphere users' credentials, from the victim once they are redirected.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-16T18:03:36.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1250 not_vulnerable 2026-06-08 05:11:17.260867 Details available
MEDIUM (6.5)
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based Authorization control implemented only in Unisphere GUI.
Published: 2018-09-28T18:00:00.000Z
Updated: 2024-09-17T04:04:33.853Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.