Unscored severity · published Aug 20, 2014
CVE-2014-2518
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Digital Assets Manager · Emc
6.5; 6.5; 6.5 · source: NVD
DA
Documentum Administrator · Emc
6.7; 6.7; 6.7; 7.0; 7.1 · source: NVD
DC
Documentum Capital Projects · Emc
1.8; 1.9 · source: NVD
DR
Documentum Records Manager · Emc
6.7; 6.7; 6.7 · source: NVD
DW
Documentum Wdk · Emc
6.7; 6.7 · source: NVD
DW
Documentum Webtop · Emc
6.7; 6.7; 6.7 · source: NVD
EP
TS
Task Space · Emc
6.7; 6.7 · source: NVD
WP
Web Publishers · Emc
6.5; 6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2518
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2518
secunia.com
http://secunia.com/advisories/60563
www.securityfocus.com
http://www.securityfocus.com/archive/1/533159/30/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/69277
www.securitytracker.com
http://www.securitytracker.com/id/1030742
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95365
More from Digital Assets Manager
–
CVE-2014-2511
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or…