Unscored severity · published Aug 20, 2014
CVE-2014-2511
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Digital Assets Manager · Emc
6.5; 6.5; 6.5 · source: NVD
DA
Documentum Administrator · Emc
6.7; 6.7; 6.7; 7.0; 7.1 · source: NVD
DC
Documentum Capital Projects · Emc
1.8; 1.9 · source: NVD
DW
Documentum Webtop · Emc
6.7; 6.7; 6.7 · source: NVD
EP
Engineering Plant Facilities Management Solution For Documentum · Emc
1.7; 1.7 · source: NVD
RC
Records Client · Emc
6.7; 6.7; 6.7 · source: NVD
TS
Task Space · Emc
6.7; 6.7; 6.7 · source: NVD
WP
Web Publishers · Emc
6.5; 6.5; 6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2511
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2511
secunia.com
http://secunia.com/advisories/60561
www.securityfocus.com
http://www.securityfocus.com/archive/1/533160/30/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/69272
www.securitytracker.com
http://www.securitytracker.com/id/1030741
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95366
More from Digital Assets Manager
–
CVE-2014-2518
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of…