CVE-2013-0937

CVE-2013-0937 is a session-fixation vulnerability affecting EMC Documentum Webtop, WDK, Taskspace, and Records Manager up to version 6.7 SP2. The entry describes that remote attackers could hijack an authenticated session via unspecified vectors. Affected components include Webtop, WDK, Taskspace...

CVE-2013-0946

CVE-2013-0946 is an EMC AlphaStor vulnerability in the Library Control Program (LCP) for EMC AlphaStor 4.0 build 910 and earlier. The issue is a stack-based buffer overflow triggered while processing remote commands, allowing an unauthenticated remote attacker to potentially execute arbitrary cod...

CVE-2013-0939

EMC Documentum CVE-2013-0939 affects Webtop, WDK, Taskspace, and Records Manager prior to 6.7 SP2. The issue is a Cross Frame Scripting vulnerability allowing remote attackers to obtain sensitive information via cross-origin frame navigation. Affected products include Webtop, WDK, Taskspace, and ...

EMC AlphaStor buffer overflow

Buffer overflow on commands parsing in AlphaStor Library Control Program...

ESA-2013-021: EMC Documentum Multiple Vulnerabilities

ESA-2013-021.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-021: EMC Documentum Multiple Vulnerabilities EMC Identifier: ESA-2013-021 CVE Identifier: CVE-2013-0937, CVE-2013-0938, CVE-2013-0939 Severity Rating: See below for individual scores Affected products: • EMC Documentum Webtop...

EMC RSA Authentication Agent crossite scripting

No description provided...

ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability

ESA-2013-037.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability EMC Identifier: ESA-2013-037 EMC Identifier: NW150511 CVE Identifier: CVE-2013-0946 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected product: • EMC...

EMC Documentum multiple security vulnerabilities

Session fixation, crossite scripting...

CVE-2013-0934

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...

CVE-2013-0933

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0932

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...

Design/Logic Flaw

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...

Design/Logic Flaw

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0933

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0934

CVE-2013-0934 affects EMC RSA Archer GRC 5.x (before 5.3SP1) and Archer Smart Suite Framework 4.x. The root cause is improper authorization that can let remote authenticated users bypass access restrictions and modify global reports via unspecified vectors. Impact is unauthorized modification of ...

CVE-2013-0932

CVE-2013-0932 affects EMC RSA Archer GRC 5.x (before 5.3SP1) and Archer Smart Suite Framework 4.x. It allows remote authenticated users to bypass access controls and upload arbitrary files via unspecified vectors, enabling potential compromise of the Archer platform. RSA ESA-2013-015 documents th...

CVE-2013-0933

CVE-2013-0933 involves multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x (before GRC 5.3SP1) and Archer Smart Suite Framework 4.x. The underlying issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected advisories (ESA-2013-01...

CVE-2013-0934

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors...

CVE-2013-0932

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors...