CVE-2014-2505

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

CVE-2014-0640

The EMC RSA Archer GRC Platform 5.x (versions before 5.5 SP1 ) is susceptible to a vulnerability where remote authenticated users can bypass intended restrictions on resource access via unspecified vectors. This flaw could allow malicious users to gain unauthorized access to specific resources wi...

CVE-2014-4618

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object...

CVE-2014-2517

Summary: CVE-2014-2517 is a privilege escalation vulnerability affecting EMC RSA Archer GRC Platform 5.x. Connected advisory ESA-2014-071 confirms a vulnerability in RSA Archer GRC Platform 5.5 SP1 timeframe where malicious non-privileged users could perform unauthorized operations within the app...

CVE-2014-2517

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2521

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC command...

CVE-2014-2511

Multiple cross-site scripting XSS vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the 1 startat or 2 entryId parameter...

CVE-2014-2520

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request...

CVE-2014-2518

EMC Documentum CSRF vulnerabilities (CVE-2014-2518) affect WebTop, Administrator, WDK, Task Space, Records Manager, Web Publisher and Digital Asset Manager across multiple versions; exploitation could hijack user sessions by tricking authenticated users. The ESA-2014-073 advisory notes the fix fo...

CVE-2014-2505: Undefined Security Weakness

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...

CVE-2014-2517: Undefined Security Weakness

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...

PT-2014-3735

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC Platform versions prior to 5.5 SP1 Description The issue allows remote authenticated users to bypass intended restrictions on resource access. Recommendations For versions prior to 5.5 SP1, update to version 5.5 SP1 or later...

PT-2014-4749

Name of the Vulnerable Software and Affected Versions EMC Documentum WebTop versions prior to 6.7 SP1 P28 EMC Documentum WebTop versions prior to 6.7 SP2 P14 Description The issue allows remote attackers to inject arbitrary web script or HTML via the startat or entryId parameters. This can lead t...

PT-2014-4758

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP2 P16 EMC Documentum Content Server versions prior to 7.1 P07 Description The issue allows remote authenticated users to conduct DQL injection attacks and read sensitive database content vi...

CVE-2014-2515: Undefined Security Weakness

EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket...

PT-2014-4759

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP2 P16 EMC Documentum Content Server versions prior to 7.1 P07 Description The issue allows remote authenticated users to read sensitive object metadata via an RPC command. Recommendations F...

CVE-2014-2521: Exposure of Sensitive Information to an Unauthorized Actor

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC command...

PT-2014-6025

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP2 P16 EMC Documentum Content Server versions 7.x prior to 7.1 P07 Description The issue allows remote authenticated users to gain privileges via a user-created system object. Recommendation...

CVE-2014-2520: Undefined Security Weakness

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request...

PT-2014-4753

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 3.1 before P24 EMC Documentum D2 version 3.1SP1 before P02 EMC Documentum D2 version 4.0 before P11 EMC Documentum D2 version 4.1 before P16 EMC Documentum D2 version 4.2 before P05 Description The issue allows remot...