The unisphere for VMax OVA uses SUSE enterprise linux. It's extremely locked-down, even ssh seems to be disabled, but it seems to use apache as the web server (judging by the http response headers).

Is it vulnerable to attack? If it is vulnerable, how will a patch be deployed to such a locked-down system I wonder?