ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability EMC Identifier: ESA-2015-122 CVE Identifier: CVE-2015-4528 Severity Rating: CVSS v2 Base Score: 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P Affected products: • EMC Documentum CenterStage...

CVE-2015-4528

EMC Documentum CenterStage is affected by a stored XSS in versions 1.2SP1 and 1.2SP2. The issue allows remote authenticated users to inject script/HTML via unspecified vectors; impact is tied to the authenticated user context. EMC’s advisory ESA-2015-122 recommends upgrading to CenterStage 1.2SP2...

CVE-2015-4528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...