Design/Logic Flaw

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

CVE-2014-2503

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

CVE-2013-3281

The CVE-2013-3281 entry describes a cross-site scripting (XSS) vulnerability in EMC Documentum products (Webtop, WDK, Taskspace, Records Manager, Web Publisher, Digital Asset Manager, Administrator, Capital Projects) prior to the stated SP versions. The flaw allows remote attackers to inject arbi...

Adobe Drive Installed

Adobe Drive is installed on the remote Windows host. Drive provides digital asset management that integrates with other applications in the Adobe Creative Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62685; scriptversion"1.8";...

CVE-2008-6239

Cross-site request forgery CSRF vulnerability in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors...

CVE-2008-6240

Cross-site scripting XSS vulnerability in data/views/index.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors...

CVE-2008-6240

OpenEdit Digital Asset Management (DAM) contains a Cross-site Scripting (XSS) vulnerability in data/views/index.html, exploitable via the catalogid parameter. Affected software is OpenEdit DAM prior to version 5.2014. The vulnerability allows remote attackers to inject arbitrary web script or HTM...

CVE-2008-6239

CVE-2008-6239 describes a CSRF vulnerability in OpenEdit Digital Asset Management (DAM) prior to 5.2014, allowing remote attackers to perform unspecified actions as arbitrary users via unknown vectors. The NVD entry lists a base score of 6.8 (Medium) with Network attack vector and no authenticati...