Emc Esrs Policy Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Emc Esrs Policy Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2018-15764dell emcesrs policy manager+1
EPSS score
5.25%
Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM.9.8CVE-2017-4976emcesrs_policy_manager
EPSS score
1.75%
EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the default password may login to the system and gain administrator privileges to the local LDAP directory server.