Lucene search

K
nvd[email protected]NVD:CVE-2013-6174
HistoryNov 21, 2013 - 4:40 a.m.

CVE-2013-6174

2013-11-2104:40:59
CWE-20
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%

Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters.

Affected configurations

NVD
Node
emcdocument_sciences_xpressionMatch4.1sp1-documentum
OR
emcdocument_sciences_xpressionMatch4.2--documentum
OR
emcdocument_sciences_xpressionMatch4.5--documentum
Node
emcdocument_sciences_xpressionMatch4.1sp1-enterprise--
OR
emcdocument_sciences_xpressionMatch4.2--enterprise--
OR
emcdocument_sciences_xpressionMatch4.5--enterprise--
Node
emcdocument_sciences_xpressionMatch4.1sp1-enterprise--
OR
emcdocument_sciences_xpressionMatch4.2--enterprise--
OR
emcdocument_sciences_xpressionMatch4.5--enterprise--

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.7%

Related for NVD:CVE-2013-6174