EMC

Records414All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical79CVSS 9.0–10.0

CVSS high111CVSS 7.0–8.9

Exploited now

EMC records in CISA KEV

No EMC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rsa Authentication Manager 25 records LOW Rsa Archer Egrc 23 records MEDIUM Documentum Content Server 21 records MEDIUM Networker 20 records HIGH Isilon Onefs 15 records MEDIUM Avamar Server 13 records MEDIUM Documentum Webtop 13 records MEDIUM Documentum D2 12 records MEDIUM

Records

10 records in Documentum Administrator · all components

TI-2008-00624 CVE-2008-0656 · GHSA-6fgq-4c34-h75j

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator…

MEDIUM 48

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02649 Published 2008-02-07 No fix listed CWE-20

TI-2015-03802 CVE-2015-4524 · GHSA-vmr9-22rc-7435

Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2…

LOW 33

Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02384 Published 2015-07-04 No fix listed CWE-434

TI-2014-02023 CVE-2014-2518 · GHSA-3694-7mhw-w3xx

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00984 Published 2014-08-20 No fix listed CWE-352

TI-2016-00823 CVE-2016-0914 · GHSA-h29m-55jq-jm6f

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum…

LOW 31

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.…

CVSS 3.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01304 Published 2016-06-23 No fix listed CWE-284

TI-2015-03808 CVE-2015-4530 · GHSA-xvgm-9mvf-hq8h

Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01…

LOW 31

Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00581 Published 2015-08-20 No fix listed CWE-352

TI-2015-03807 CVE-2015-4529 · GHSA-x6cf-wqfh-ppxq

Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum…

LOW 30

Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01803 Published 2015-07-16 No fix listed

TI-2016-06766 CVE-2016-8213 · GHSA-mq94-7mm8-m4xr

Cross-site scripting in EMC Documentum Webtop and Clients

LOW 29

EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10,…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2017-01-23 No fix listed CWE-79

TI-2014-02016 CVE-2014-2511 · GHSA-m9p2-7w3p-hjg2

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01792 Published 2014-08-20 No fix listed CWE-79

TI-2013-02868 CVE-2013-3281 · GHSA-jr25-cgw7-4x3q

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07…

LOW 22

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01001 Published 2013-11-06 No fix listed CWE-79

TI-2015-00510 CVE-2015-0551 · GHSA-jv95-xwvp-r9rg

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 be…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01068 Published 2015-07-04 No fix listed CWE-79

Open these records in search →

Critical	79
High	111
Medium	194
Low	30
No CVSS	0