Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

emc documentum wdk vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2013-3281
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop prior to 6.7 SP2 P07, Documentum WDK prior to 6.7 SP2 P07, Documentum Taskspace prior to 6.7 SP2 P07, Documentum Records Manager prior to 6.7 SP2 P07, Documentum Web Publisher prior to 6.5 SP7, Documentum Digital A...
Emc Documentum TaskspaceEmc Documentum Taskspace 6.7Emc Documentum Capital ProjectsEmc Documentum Wdk 6.7Emc Documentum WdkEmc Documentum Digital Asset Manager 6.5Emc Documentum Digital Asset ManagerEmc Documentum Administrator 6.7Emc Documentum AdministratorEmc Documentum WebtopEmc Documentum Webtop 6.7Emc Documentum Web PublisherEmc Documentum Web Publisher 6.5
5
CVSSv2
CVE-2014-4638
EMC Documentum Web Development Kit (WDK) prior to 6.8 allows remote malicious users to conduct frame-injection attacks and obtain sensitive information via unspecified vectors.
Emc Documentum Wdk
4.3
CVSSv2
CVE-2014-4635
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) prior to 6.8 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Emc Documentum Wdk
6.8
CVSSv2
CVE-2014-4636
Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) prior to 6.8 allows remote malicious users to hijack the authentication of arbitrary users for requests that perform Docbase operations.
Emc Documentum Wdk
6.4
CVSSv2
CVE-2014-4637
Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) prior to 6.8 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.
Emc Documentum Wdk
5
CVSSv2
CVE-2014-4639
EMC Documentum Web Development Kit (WDK) prior to 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote malicious users to conduct phishing attacks via brute-force attempts to predict the parameter val...
Emc Documentum Wdk
4.3
CVSSv2
CVE-2013-0938
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop prior to 6.7 SP2, Documentum WDK prior to 6.7 SP2, Documentum Taskspace prior to 6.7 SP2, and Documentum Records Manager prior to 6.7 SP2 allows remote malicious users to inject arbitrary web script or HTML via uns...
Emc Documentum Taskspace 6.7Emc Documentum Records Manager 6.7Emc Documentum Webtop 6.7Emc Documentum Wdk 6.7
5.8
CVSSv2
CVE-2013-0939
EMC Documentum Webtop prior to 6.7 SP2, Documentum WDK prior to 6.7 SP2, Documentum Taskspace prior to 6.7 SP2, and Documentum Records Manager prior to 6.7 SP2 allow remote malicious users to obtain sensitive information via vectors involving cross-origin frame navigation, relate...
Emc Documentum Webtop 6.7Emc Documentum Wdk 6.7Emc Documentum Taskspace 6.7Emc Documentum Records Manager 6.7
5.8
CVSSv2
CVE-2013-0937
Session fixation vulnerability in EMC Documentum Webtop prior to 6.7 SP2, Documentum WDK prior to 6.7 SP2, Documentum Taskspace prior to 6.7 SP2, and Documentum Records Manager prior to 6.7 SP2 allows remote malicious users to hijack web sessions via unspecified vectors.
Emc Documentum Webtop 6.7Emc Documentum Wdk 6.7Emc Documentum Taskspace 6.7Emc Documentum Records Manager 6.7
6.8
CVSSv2
CVE-2014-2518
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK prior to 6.7SP1 P28 and 6.7SP2 before P15 allow remote malicious users to hijack the authentication of arbitrary users.
Emc Documentum Capital Projects 1.9Emc Documentum Records Manager 6.7Emc Documentum Administrator 6.7Emc Documentum Capital Projects 1.8Emc Engineering Plant Facilities Management Solution For Documentum 1.7Emc Digital Assets Manager 6.5Emc Task Space 6.7Emc Documentum Webtop 6.7Emc Web Publishers 6.5Emc Documentum Administrator 7.1Emc Documentum Wdk 6.7Emc Documentum Administrator 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook