Vulnerability Details CVE-2016-0889
An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 84.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2016-0889
-
cpe:2.3:a:dell:emc_unisphere:1.0
-
cpe:2.3:a:dell:emc_unisphere:1.1
-
cpe:2.3:a:dell:emc_unisphere:1.5
-
cpe:2.3:a:dell:emc_unisphere:1.6
-
cpe:2.3:a:dell:emc_unisphere:8.0
-
cpe:2.3:a:dell:emc_unisphere:8.1