Read the docs
TI-2015-00510 Aliases CVE-2015-0551GHSA-jv95-xwvp-r9rg

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1…

Priority LOW 19CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Why it matters now

EPSS 0.01068 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:emc:documentum_administrator:6.7:sp1:*:*:*:*:*:*6.7 sp1VulnerableEMC
cpe:2.3:a:emc:documentum_administrator:6.7:sp2:*:*:*:*:*:*6.7 sp2VulnerableEMC
cpe:2.3:a:emc:documentum_administrator:7.0:*:*:*:*:*:*:*7.0VulnerableEMC
cpe:2.3:a:emc:documentum_administrator:7.1:*:*:*:*:*:*:*7.1VulnerableEMC
cpe:2.3:a:emc:documentum_administrator:7.2:*:*:*:*:*:*:*7.2VulnerableEMC
cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp6:*:*:*:*:*:*6.5 sp6VulnerableEMC
cpe:2.3:a:emc:documentum_taskspace:6.7:sp1:*:*:*:*:*:*6.7 sp1VulnerableEMC
cpe:2.3:a:emc:documentum_taskspace:6.7:sp2:*:*:*:*:*:*6.7 sp2VulnerableEMC
cpe:2.3:a:emc:documentum_web_publisher:6.5:sp7:*:*:*:*:*:*6.5 sp7VulnerableEMC
cpe:2.3:a:emc:documentum_webtop:6.7:sp1:*:*:*:*:*:*6.7 sp1VulnerableEMC
  • cpe:2.3:a:emc:documentum_administrator:6.7:sp1:*:*:*:*:*:* Versions 6.7 sp1 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_administrator:6.7:sp2:*:*:*:*:*:* Versions 6.7 sp2 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_administrator:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_administrator:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_administrator:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp6:*:*:*:*:*:* Versions 6.5 sp6 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_taskspace:6.7:sp1:*:*:*:*:*:* Versions 6.7 sp1 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_taskspace:6.7:sp2:*:*:*:*:*:* Versions 6.7 sp2 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_web_publisher:6.5:sp7:*:*:*:*:*:* Versions 6.5 sp7 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_webtop:6.7:sp1:*:*:*:*:*:* Versions 6.7 sp1 Vulnerable ·EMC
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:emc:documentum_webtop:6.7:sp2:*:*:*:*:*:*6.7 sp2VulnerableEMC
cpe:2.3:a:emc:documentum_webtop:6.8:*:*:*:*:*:*:*6.8VulnerableEMC
  • cpe:2.3:a:emc:documentum_webtop:6.7:sp2:*:*:*:*:*:* Versions 6.7 sp2 Vulnerable ·EMC
  • cpe:2.3:a:emc:documentum_webtop:6.8:*:*:*:*:*:*:* Versions 6.8 Vulnerable ·EMC

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-0551
  2. 2026-10-03 Alias added: GHSA-jv95-xwvp-r9rg

References

Other 1

  • TI-2008-00624 Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator… CVSS 2.0HIGH 10.0
  • TI-2015-03802 Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2… CVSS 2.0MEDIUM 6.5
  • TI-2014-02023 Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before… CVSS 2.0MEDIUM 6.8
  • TI-2016-00823 EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum… CVSS 3.0MEDIUM 6.3
  • TI-2015-03808 Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01… CVSS 2.0MEDIUM 6.8
  • TI-2015-03807 Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum… CVSS 2.0MEDIUM 5.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences