ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability EMC Identifier: ESA-2015-122 CVE Identifier: CVE-2015-4528 Severity Rating: CVSS v2 Base Score: 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P Affected products: • EMC Documentum CenterStage...

CVE-2015-4528

EMC Documentum CenterStage is affected by a stored XSS in versions 1.2SP1 and 1.2SP2. The issue allows remote authenticated users to inject script/HTML via unspecified vectors; impact is tied to the authenticated user context. EMC’s advisory ESA-2015-122 recommends upgrading to CenterStage 1.2SP2...

PT-2015-1697

Name of the Vulnerable Software and Affected Versions EMC Documentum CenterStage versions 1.2SP1 through 1.2SP2 Description The issue exists due to insufficient protection of the web page structure, allowing for the exploitation of a cross-site scripting XSS vulnerability. This could enable a...

CVE-2015-4528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...