Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
OpentextDocumentum Content Server

4 matches found

CVE
CVE•added 2017/10/13 4:29 p.m.•59 views

CVE-2017-15012

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file from the Content Server filesystem; because some files on the Content Server file...

8.8CVSS8.6AI score0.0229EPSS
CVE
CVE•added 2017/10/13 4:29 p.m.•59 views

CVE-2017-15013

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server stores information about uploaded files in dmr_content objects, which are queryable and "editabl...

8.8CVSS8.6AI score0.01887EPSS
CVE
CVE•added 2017/10/13 4:29 p.m.•54 views

CVE-2017-15014

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows authenticated users to download arbitrary content files regardless of the attacker's repository permissions: When an authenticated user uploads content to the repo...

4.3CVSS4.5AI score0.03972EPSS
CVE
CVE•added 2017/10/13 4:29 p.m.•51 views

CVE-2017-15276

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Serv...

8.8CVSS8.7AI score0.02611EPSS