Unscored severity · published May 10, 2013
CVE-2013-0939
EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to…
–
CVSS
1.1%
EPSS
No
On KEV
Description
EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting" issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
Documentum Records Manager · Emc
6.7; 6.7 · source: NVD
DT
Documentum Taskspace · Emc
6.7; 6.7 · source: NVD
DW
Documentum Wdk · Emc
6.7; 6.7 · source: NVD
DW
Documentum Webtop · Emc
6.7; 6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0939
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0939
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-05/0037.html
More from Documentum Records Manager
–
CVE-2014-2518
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of…
–
CVE-2013-0938
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records…
–
CVE-2013-0937
Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before…