Session fixation

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors...

CVE-2012-0404

EMC Documentum eRoom is affected by CVE-2012-0404, a DOM-based cross-site scripting vulnerability in versions prior to 7.4.4. The issue enables an attacker to inject arbitrary web script or HTML via unspecified vectors. EMC’s advisory ESA-2012-012 confirms upgrade to eRoom 7.4.4 as a remedy. No e...

CVE-2012-0398

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors...

PT-2012-2542

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions prior to 7.4.4 Description The issue is related to improper validation of session cookies, allowing remote attackers to hijack or replay sessions. Recommendations For versions prior to 7.4.4, update to version 7.4...

PT-2012-2548

Name of the Vulnerable Software and Affected Versions EMC Documentum eRoom versions prior to 7.4.4 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

CVE-2012-0398

CVE-2012-0398 affects EMC Documentum eRoom prior to 7.4.4. The flaw involves improper validation of session cookies, enabling remote attackers to hijack or replay user sessions via unspecified vectors. EMC’s advisory/esg127683 recommends upgrading to eRoom 7.4.4 to remediate. Other connected sour...

CVE-2012-0404

Cross-site scripting XSS vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0398: Undefined Security Weakness

EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors...

CVE-2012-0404: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability. EMC Identifier: ESA-2012-009 EMC Identifier: CS-16072 EMC Identifier: CS-16073 CVE Identifier: CVE-2011-4144 Severity Rating: CVSS v2 Base Score: 6.8...

EMC Documentum Content Server privilege escalation

System administrator can elevate privileges to super-user...

ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability. EMC Identifier: ESA-2012-010 EMC Identifier: SRCH-7949 CVE Identifier: CVE-2012-0396 Severity Rating: CVSS v2 Base Score: 4.0 AV:N/AC:L/Au:S/C:P/I:N/A:N Affected products: EMC S...

EMC Documentum xPlore information leakage

Under specific circumstances, an authenticated user who does not have BROWSE permission on the object may be able to see the existence of or certain metadata on that object in a search result...

CVE-2012-0396

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search...

Code injection

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search...

CVE-2012-0396

EMC Documentum xPlore information disclosure (CVE-2012-0396) affects xPlore 1.0, 1.1 (before P07), and 1.2. The issue is that BROWSE permission is not properly enforced, allowing remote authenticated users to determine object existence or read certain metadata via a search, though they cannot ope...

CVE-2012-0396

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search...

PT-2012-2540

Name of the Vulnerable Software and Affected Versions EMC Documentum xPlore versions 1.0 through 1.2 before P07 Description The issue allows remote authenticated users to determine the existence of an object or read object metadata via a search, due to improper enforcement of the BROWSE permissio...

CVE-2012-0396: Undefined Security Weakness

EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search...

CVE-2011-4144

Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrator privileges...