Documentum Content Server vulnerabilities | LiveThreat CVE Feed

Product

Documentum Content Server

by Emc · last CVE Sep 4, 2015

CVEs

On KEV

–

Max CVSS

New 30D

Vulnerabilities21 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities21 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Documentum Content Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-4544	–	3%	Sep 4	EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to… Affected: 7.1; 7.2
CVE-2015-4536	–	1%	Aug 20	EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which… Affected: 7.0; 7.1; 7.2
CVE-2015-4535	–	2%	Aug 20	Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is… Affected: 6.7; 6.7; 7.0; 7.1; 7.2
CVE-2015-4534	–	4%	Aug 20	Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated… Affected: 6.7; 6.7; 7.0; 7.1; 7.2
CVE-2015-4533	–	4%	Aug 20	EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an… Affected: 6.7; 6.7; 7.0; 7.1; 7.2
CVE-2015-4532	–	3%	Aug 20	EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly… Affected: 6.7; 6.7; 7.0; 7.1; 7.2
CVE-2015-4531	–	2%	Aug 20	EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of… Affected: 6.7; 6.7; 7.0; 7.1; 7.2
CVE-2014-4626	–	4%	Dec 17	EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a… Affected: through 6.7; 6.7; 6.7; 7.0; 7.1
CVE-2014-4629	–	3%	Dec 6	EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related… Affected: 6.7; 6.7; 6.7; 7.0; 7.1
CVE-2014-4622	–	3%	Sep 17	EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-4621	–	3%	Sep 17	EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-4618	–	2%	Aug 20	EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-2521	–	2%	Aug 20	EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC command Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-2520	–	2%	Aug 20	EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-2514	–	3%	Jul 8	EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization and does not properly restrict… Affected: through 6.7; 6.7; 6.7; 7.0; 7.1
CVE-2014-2513	–	3%	Jul 8	EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check authorization after creation of an object, which… Affected: through 6.7; 6.7; 6.7; 7.0; 7.1
CVE-2014-2508	–	2%	Jun 8	EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to conduct Documentum Query Language… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-2507	–	4%	Jun 8	EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to execute arbitrary commands via shell… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-2506	–	3%	Jun 8	EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to obtain super-user privileges for… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2014-0642	–	1%	Apr 15	EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions… Affected: through 6.7; 6.0; 6.5; 6.5; 6.5; 6.5; +5 more
CVE-2011-4144	–	0%	Feb 2	Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user… Affected: 6.0; 6.5; 6.5; 6.5; 6.5; 6.6