dell emc unityvsa operating environment

Name: dell emc unityvsa operating environment
Brand: dell

productUS

cpe:2.3:a:dell:emc_unityvsa_operating_environment:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high8medium0low

updated 2026-10-23

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1239US	high7.2	3.26% (88th)	—	4.3.0.1522077968	2018-05-08	< 4.3.0.1522077968
CVE-2020-5319US	high7.5	1.40% (72nd)	—	5.0.2.0.5.009	2020-02-06	< 5.0.2.0.5.009
CVE-2018-1246US	medium6.1	1.12% (66th)	—	4.3.1.1525703027	2018-09-28	< 4.3.1.1525703027
CVE-2019-3754US	medium6.1	1.11% (66th)	—	5.0.0.0.5.116	2019-09-03	< 5.0.0.0.5.116
CVE-2019-3734US	medium4.3	1.05% (64th)	—	5.0.0.0.5.116	2019-07-18	< 5.0.0.0.5.116
CVE-2022-22564US	medium5.9OT elevated	0.45% (38th)	—	5.2.0.0.5.173	2023-02-14	< 5.2.0.0.5.173
CVE-2021-43589US	medium6.7	0.44% (38th)	—	5.1.2.0.5.007	2022-01-24	< 5.1.2.0.5.007
CVE-2018-11064US	high7.8	0.39% (32nd)	—	no fix	2018-10-05	4.3.0.1522077968 → 4.3.1.1525703027
CVE-2019-3741US	high7.8	0.34% (26th)	—	5.0.0.0.5.116	2019-07-18	< 5.0.0.0.5.116
CVE-2021-21591US	medium6.7	0.20% (9th)	—	5.1.0.0.5.394	2021-07-12	< 5.1.0.0.5.394
CVE-2021-21590US	medium6.7	0.20% (9th)	—	5.1.0.0.5.394	2021-07-12	< 5.1.0.0.5.394
CVE-2021-21589US	medium6.7	0.19% (8th)	—	5.1.0.0.5.394	2021-07-12	< 5.1.0.0.5.394

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-129Improper Validation of Array Index1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-693Protection Mechanism Failure1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.