CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Code injection

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

CVE-2016-6644

EMC Documentum D2 4.5.x before 4.5 P15 or 4.6.x before 4.6 P03 is affected by an information-disclosure vulnerability due to improper validation of the r_object_id identifier. An unauthenticated remote attacker could read arbitrary Docbase documents by leveraging knowledge of an r_object_id value...

CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

CVE-2016-0915

The Self-Service Portal in EMC RSA Authentication Manager AM Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service PIN change for an arbitrary user via a modified token serial number within a PIN change request, related to a "direct...

Design/Logic Flaw

The Self-Service Portal in EMC RSA Authentication Manager AM Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service PIN change for an arbitrary user via a modified token serial number within a PIN change request, related to a "direct...

CVE-2016-0915

CVE-2016-0915 affects the Self-Service Portal in EMC RSA Authentication Manager Prime Self-Service 3.0 and 3.1 (before 3.1 1915.42871). The vulnerability is a direct object reference flaw that allows remote authenticated users to cause a denial of service by altering a token serial number within ...

CVE-2016-0915

The Self-Service Portal in EMC RSA Authentication Manager AM Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service PIN change for an arbitrary user via a modified token serial number within a PIN change request, related to a "direct...

Release Notes for Veeam Backup & Replication 9.0 Update 2

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.0 Update 2 Cause Please confirm you are running version 9.0.0.902 or 9.0.0.1491 prior to installing this updat...

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

CVE-2016-0906

The CVE-2016-0906 entry describes a vulnerability in EMC Avamar’s web-restore interface present in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) up to versions 7.2.1. An authenticated remote user can read or delete directories via Linux backup-restore operations, indicating improper ac...

CVE-2016-0899

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files...

Design/Logic Flaw

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files...

CVE-2016-0899

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files...

CVE-2016-0899

CVE-2016-0899 affects EMC RSA Archer GRC 5.5.x before 5.5.3.4. Affects web application where remote authenticated users can read the web.config.bak file by altering IIS to set a Content-Type header for .bak files, enabling access to sensitive credential information. Root cause: improper handling ...

EMC NetWorker 8.2.1.x < 8.2.2.6 / 9.0.x < 9.0.0.6 RCE

The version of EMC NetWorker installed on the remote Windows host is 8.2.1.x prior to 8.2.2.6 or 9.0.x prior to 9.0.0.6. It is, therefore, affected by a remote code execution vulnerability due to improper handling of authentication. An unauthenticated, remote attacker can exploit this to execute...

CVE-2016-0914

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions...

Design/Logic Flaw

EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions...

CVE-2016-0914

EMC Documentum WebTop and related components are affected by CVE-2016-0914. The vulnerability allows remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface. Affected products/versions and patches (as described): WebTo...

Multiple EMC Product Privilege Bypass Vulnerabilities

EMC Documentum WebTop is a suite of products that allow users to access Documentum repositories and content management services in a standard browser application.Documentum Administrator is a set of Web-based development tools for performing Documentum system administration tasks. Documentum...