4959 matches found
CVE-2014-2517
Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2014-2521
CVE-2014-2521 affects EMC Documentum Content Server versions 6.7 SP2 P16 and 7.x prior to 7.1 P07. The vulnerability stems from improper authorization checks on certain RPC commands, allowing remote authenticated users to read sensitive object metadata. Impact is read access to metadata of unauth...
CVE-2014-2515
CVE-2014-2515 affects EMC Documentum D2 and its related components. The issue arises from inadequate access control in the D2GetAdminTicketMethod and D2RefreshCacheMethod, allowing a remote, authenticated user to obtain a superuser ticket and escalate privileges. Affected product versions include...
CVE-2014-2517
Summary: CVE-2014-2517 is a privilege escalation vulnerability affecting EMC RSA Archer GRC Platform 5.x. Connected advisory ESA-2014-071 confirms a vulnerability in RSA Archer GRC Platform 5.5 SP1 timeframe where malicious non-privileged users could perform unauthorized operations within the app...
CVE-2014-2518
Multiple cross-site request forgery CSRF vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users...
CVE-2014-2518
EMC Documentum CSRF vulnerabilities (CVE-2014-2518) affect WebTop, Administrator, WDK, Task Space, Records Manager, Web Publisher and Digital Asset Manager across multiple versions; exploitation could hijack user sessions by tricking authenticated users. The ESA-2014-073 advisory notes the fix fo...
CVE-2014-2520
EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request...
CVE-2014-2511
CVE-2014-2511 maps to EMC Documentum WebTop multiple XSS vulnerabilities exploitable via startat and entryId parameters. The ESA-2014-059 advisory confirms the issue affects EMC WebTop 6.7 SP1, 6.7 SP2 (and other Documentum/WebTop family products) with fixes in specific patches/versions (e.g., We...
CVE-2014-2505
RSA Archer GRC Platform 5.x prior to 5.5 SP1 is affected by CVE-2014-2505, which allows an attacker to cause the application to download code from an untrusted control sphere, potentially changing functionality. The linked advisory (ESA-2014-071) confirms the vulnerability as one of several in RS...
CVE-2014-0640
CVE-2014-0640 affects EMC RSA Archer GRC Platform 5.x, prior to 5.5 SP1, where remote authenticated users can bypass resource-access restrictions via unspecified vectors. The RSA advisory ESA-2014-071 confirms this vulnerability within the 5.5 SP1 fixes bundle for RSA Archer GRC Platform 5.x. Imp...
CVE-2014-0641
The CVE-2014-0641 issue affects EMC RSA Archer GRC Platform 5.x (up to 5.5 SP1). It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow a remote attacker to hijack an authenticated user’s session in the victim’s browser by enticing the user to click crafted links or similar acti...
CVE-2014-4618
EMC Documentum Content Server vulnerability CVE-2014-4618 allows a remote authenticated user to gain higher privileges via a user-created system object due to improper authorization checks. Affected products/versions include EMC Documentum Content Server 6.7 SP2 P16 and 7.x before 7.1 P07. The is...
ESA-2014-055: EMC Network Configuration Manager (NCM) Report Advisor Session Fixation Vulnerability
ESA-2014-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-055: EMC Network Configuration Manager NCM Report Advisor Session Fixation Vulnerability EMC Identifier: ESA-2014-055 CVE Identifier: CVE-2014-2509 Severity Rating: CVSS v2 Base Score: 6.9 AV:A/AC:M/Au:N/C:C/I:P/A:P Affected...
EMC Network Configuration Manager session fixation
Report Advisor session fixation...
ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting Vulnerabilities
ESA-2014-060.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-060: EMC Documentum eRoom Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2014-060 CVE Identifier: CVE-2014-2512 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products: • EMC...
ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities
ESA-2014-064.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-064: EMC Documentum Content Server Privilege Escalation Vulnerabilities EMC Identifier: ESA-2014-064 CVE Identifier: CVE-2014-2513, CVE-2014-2514 Severity Rating: CVSS v2 Base Score: Refer below for scores for each CVE...
ESA-2014-057: EMC Documentum Foundation Services (DFS) XML External Entity (XXE) Vulnerability
ESA-2014-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-057: EMC Documentum Foundation Services DFS XML External Entity XXE Vulnerability EMC Identifier: ESA-2014-057 CVE Identifier: CVE-2014-2510 Severity Rating: CVSS v2 Base Score: 8 AV:N/AC:L/Au:S/C:C/I:P/A:P Affected products:...
SEC Consult SA-20140701-0 :: Stored cross-site scripting vulnerabilities in EMC Documentum eRoom
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140701-0 ======================================================================= title: Stored cross-site scripting vulnerabilities product: EMC Documentum eRoom vulnerable version: 7.4.3, 7.4.4, 7.4.4...
ESA-2014-074: EMC RecoverPoint Appliance Security Control Bypass Vulnerability
ESA-2014-074.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-074: EMC RecoverPoint Appliance Security Control Bypass Vulnerability EMC Identifier: ESA-2014-074 CVE Identifier: CVE-2014-2519 Severity Rating: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:N/A:P Affected products: • EMC...