CVE-2014-4637

Open redirect vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

CVE-2014-4639

EMC Documentum Web Development Kit WDK before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value...

CVE-2014-4635

EMC Documentum Web Development Kit (WDK) before 6.8 contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2014-4635). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially impacting users in the context of authenticated sessions....

CVE-2014-4638

EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors...

CVE-2014-4637

EMC Documentum Web Development Kit (WDK) prior to version 6.8 contains a URL Redirection vulnerability (CVE-2014-4637). The issue arises from an unvalidated parameter allowing a remote attacker to redirect users to arbitrary sites, enabling phishing-like redirects. ESA-2014-180 summarizes related...

CVE-2014-4639

CVE-2014-4639 affects EMC Documentum Web Development Kit (WDK) before 6.8. The issue is insufficient randomness in a Webtop component parameter, enabling remote attackers to predict the parameter and carry out phishing via brute-force attempts. The ESA-2014-180 advisory lists this under multiple ...

CVE-2014-4638

EMC Documentum Web Development Kit (WDK) prior to version 6.8 contains a frame-injection vulnerability (CVE-2014-4638). The issue can allow remote attackers to induce the user to load an attacker-controlled page in a frame and potentially harvest sensitive information, with the documented base CV...

Unspecified Vulnerability in EMC Documentum Web Development Kit (WDK)

The EMC Documentum Web Development Kit WDK is a Web development kit. An unspecified vulnerability exists in EMC Documentum Web Development Kit WDK, which can be exploited by remote attackers to perform unauthorized operations...

CVE-2014-4638: Exposure of Sensitive Information to an Unauthorized Actor

EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors...

CVE-2014-4637: Undefined Security Weakness

Open redirect vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...

CVE-2014-4636: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations...

CVE-2014-4635: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4639: Undefined Security Weakness

EMC Documentum Web Development Kit WDK before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value...

EMC Documentum Web Development Kit (WDK) URL Redirection Vulnerability

The EMC Documentum Web Development Kit WDK is a Web development kit. The EMC Documentum Web Development Kit WDK contains a URL redirection vulnerability that can be exploited by an attacker to construct URLs that contain malicious Web sites, which may be redirected to an attacker-controlled Web...

PT-2015-3764

Name of the Vulnerable Software and Affected Versions EMC Documentum Web Development Kit WDK versions prior to 6.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The exact vectors used for the...

PT-2015-3766

Name of the Vulnerable Software and Affected Versions EMC Documentum Web Development Kit WDK versions prior to 6.8 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter. Recommendations For versions prior t...

PT-2015-3768

Name of the Vulnerable Software and Affected Versions EMC Documentum Web Development Kit WDK versions prior to 6.8 Description The issue makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict a certain parameter value related to Webtop components, due...

PT-2015-3765

Name of the Vulnerable Software and Affected Versions EMC Documentum Web Development Kit WDK versions prior to 6.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations...

Unspecified Framework Injection Vulnerability in EMC Documentum Web Development Kit (WDK)

The EMC Documentum Web Development Kit WDK is a Web development kit. An unspecified frame injection vulnerability exists in EMC Documentum Web Development Kit WDK, which can be exploited by attackers to conduct phishing attacks...

EMC Documentum Web Development Kit (WDK) Cross-Site Request Forgery Vulnerability

The EMC Documentum Web Development Kit WDK is a Web development kit. A cross-site request forgery vulnerability exists in the EMC Documentum Web Development Kit WDK, which could be exploited by a remote attacker to perform certain unauthorized actions and gain access to vulnerable applications...