CVE-2013-6176

2013-11-2104:40:59

CWE-89

[email protected]

web.nvd.nist.gov

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote authenticated users to execute arbitrary SQL commands via unspecified input to a (1) xAdmin or (2) xDashboard form.

Affected configurations

Nvd

Node

emcdocument_sciences_xpressionMatch4.1sp1-enterprise--

emcdocument_sciences_xpressionMatch4.2--enterprise--

emcdocument_sciences_xpressionMatch4.5--enterprise--

Node

emcdocument_sciences_xpressionMatch4.1sp1-documentum

emcdocument_sciences_xpressionMatch4.2--documentum

emcdocument_sciences_xpressionMatch4.5--documentum

Node

emcdocument_sciences_xpressionMatch4.1sp1-enterprise--

emcdocument_sciences_xpressionMatch4.2--enterprise--

emcdocument_sciences_xpressionMatch4.5--enterprise--

VendorProductVersionCPE
emcdocument_sciences_xpression4.1cpe:2.3:a:emc:document_sciences_xpression:4.1:sp1:-:*:enterprise:-:-:publish_engine
emcdocument_sciences_xpression4.2cpe:2.3:a:emc:document_sciences_xpression:4.2:-:-:*:enterprise:-:-:publish_engine
emcdocument_sciences_xpression4.5cpe:2.3:a:emc:document_sciences_xpression:4.5:-:-:*:enterprise:-:-:publish_engine
emcdocument_sciences_xpression4.1cpe:2.3:a:emc:document_sciences_xpression:4.1:sp1:-:*:documentum:*:*:*
emcdocument_sciences_xpression4.2cpe:2.3:a:emc:document_sciences_xpression:4.2:-:-:*:documentum:*:*:*
emcdocument_sciences_xpression4.5cpe:2.3:a:emc:document_sciences_xpression:4.5:-:-:*:documentum:*:*:*
emcdocument_sciences_xpression4.1cpe:2.3:a:emc:document_sciences_xpression:4.1:sp1:-:*:enterprise:-:-:compuset_engine
emcdocument_sciences_xpression4.2cpe:2.3:a:emc:document_sciences_xpression:4.2:-:-:*:enterprise:-:-:compuset_engine
emcdocument_sciences_xpression4.5cpe:2.3:a:emc:document_sciences_xpression:4.5:-:-:*:enterprise:-:-:compuset_engine

Vendor	Product	Version	CPE
emc	document_sciences_xpression	4.1	cpe:2.3:a:emc:document_sciences_xpression:4.1:sp1:-:*:enterprise:-:-:publish_engine
emc	document_sciences_xpression	4.2	cpe:2.3:a:emc:document_sciences_xpression:4.2:-:-:*:enterprise:-:-:publish_engine
emc	document_sciences_xpression	4.5	cpe:2.3:a:emc:document_sciences_xpression:4.5:-:-:*:enterprise:-:-:publish_engine
emc	document_sciences_xpression	4.1	cpe:2.3:a:emc:document_sciences_xpression:4.1:sp1:-::documentum:::
emc	document_sciences_xpression	4.2	cpe:2.3:a:emc:document_sciences_xpression:4.2:-:-::documentum:::
emc	document_sciences_xpression	4.5	cpe:2.3:a:emc:document_sciences_xpression:4.5:-:-::documentum:::
emc	document_sciences_xpression	4.1	cpe:2.3:a:emc:document_sciences_xpression:4.1:sp1:-:*:enterprise:-:-:compuset_engine
emc	document_sciences_xpression	4.2	cpe:2.3:a:emc:document_sciences_xpression:4.2:-:-:*:enterprise:-:-:compuset_engine
emc	document_sciences_xpression	4.5	cpe:2.3:a:emc:document_sciences_xpression:4.5:-:-:*:enterprise:-:-:compuset_engine