Priority MEDIUM 40
EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm_world group and the dm_superusers_dynamic group, which allows remote authenticated users to o…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.01474 · Published 2014-03-06 · No fix listed CWE-264
Priority LOW 33
Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.02384 · Published 2015-07-04 · No fix listed CWE-434
Priority LOW 31
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.…
CVSS 3.0MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.01304 · Published 2016-06-23 · No fix listed CWE-284
Priority LOW 31
Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, an…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00581 · Published 2015-08-20 · No fix listed CWE-352
Priority LOW 30
Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01803 · Published 2015-07-16 · No fix listed
Priority LOW 29
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10,…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00961 · Published 2017-01-23 · No fix listed CWE-79
Priority LOW 28
EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors i…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01057 · Published 2013-05-10 · No fix listed CWE-20
Priority LOW 28
Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.0109 · Published 2013-05-10 · No fix listed CWE-287
Priority LOW 22
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01001 · Published 2013-11-06 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00942 · Published 2013-05-10 · No fix listed CWE-79
Priority LOW 21
EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.00947 · Published 2014-03-06 · No fix listed CWE-264
Priority LOW 19
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 be…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01068 · Published 2015-07-04 · No fix listed CWE-79