Unscored severity · published Nov 6, 2013
CVE-2013-3281
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Documentum Administrator · Emc
through 6.7; 6.7; 6.7 · source: NVD
DC
Documentum Capital Projects · Emc
through 1.8 · source: NVD
DD
Documentum Digital Asset Manager · Emc
through 6.5; 6.5; 6.5; 6.5; 6.5; 6.5 · source: NVD
DT
Documentum Taskspace · Emc
through 6.7; 6.7; 6.7 · source: NVD
DW
Documentum Wdk · Emc
through 6.7; 6.7; 6.7 · source: NVD
DW
Documentum Web Publisher · Emc
through 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +1 more · source: NVD
DW
Documentum Webtop · Emc
through 6.7; 6.7; 6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3281
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3281
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-11/0018.html
US Government Resource
http://www.kb.cert.org/vuls/id/466876
More from Documentum Administrator
6.3
CVE-2016-0914
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10…
6.1
CVE-2016-8213
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects…
–
CVE-2015-4530
Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6,…
–
CVE-2015-4529
Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web…
–
CVE-2015-4524
Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before…