Vulnerabilities

TI-2014-03824 CVE-2014-4639 · GHSA-8jff-gqc3-rc4h

EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random…

LOW 27

EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks v…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02221 Published 2015-01-07 No fix listed CWE-189

TI-2014-03823 CVE-2014-4638 · GHSA-7324-v577-f32f

EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct…

LOW 27

EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02314 Published 2015-01-07 No fix listed CWE-200

TI-2014-03822 CVE-2014-4637 · GHSA-cxrr-52pg-2gh8

Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows…

LOW 33

Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02297 Published 2015-01-07 No fix listed

TI-2014-03821 CVE-2014-4636 · GHSA-7qxf-jhcq-jx9g

Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit…

LOW 32

Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01098 Published 2015-01-07 No fix listed CWE-352

TI-2014-03820 CVE-2014-4635 · GHSA-jw9h-q3wm-jq53

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01915 Published 2015-01-07 No fix listed CWE-79

TI-2014-02023 CVE-2014-2518 · GHSA-3694-7mhw-w3xx

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00984 Published 2014-08-20 No fix listed CWE-352

TI-2013-02868 CVE-2013-3281 · GHSA-jr25-cgw7-4x3q

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07…

LOW 22

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01001 Published 2013-11-06 No fix listed CWE-79

TI-2013-00803 CVE-2013-0939 · GHSA-7rhx-5frh-x32w

EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace…

LOW 28

EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors i…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01057 Published 2013-05-10 No fix listed CWE-20

TI-2013-00802 CVE-2013-0938 · GHSA-chxv-r9m3-2hqp

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2…

LOW 22

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00942 Published 2013-05-10 No fix listed CWE-79

TI-2013-00801 CVE-2013-0937 · GHSA-jjq9-66vx-2w8q

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK…

LOW 28

Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0109 Published 2013-05-10 No fix listed CWE-287

Vulnerabilities

Filters