CVE-2015-0513

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-01-21 · updated 2026-06-17
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified fields.

Affected products

EMC Vipr Srm: through 3.6.0
EMC Watch4Net: through 6.5

References

http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
http://www.securityfocus.com/bid/72259
http://www.securitytracker.com/id/1031567
http://archives.neohapsis.com/archives/bugtraq/2015-01/0092.html
http://www.securityfocus.com/bid/72259
http://www.securitytracker.com/id/1031567

Get alerted when CVE-2015-0513 or the next vulnerability affects your stack