XSS in Emc Digital Assets Manager
CVE-2014-2511
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.018 (76.1th percentile) — read the EPSS interpretation.
Affected products
- Emc Digital_assets_manager — versions 6.5
- Emc Documentum_administrator — versions 6.7, 7.0, 7.1
- Emc Documentum_capital_projects — versions 1.8, 1.9
- Emc Documentum_webtop — versions 6.7
- Emc Engineering_plant_facilities_management_solution_for_documentum — versions 1.7
- Emc Records_client — versions 6.7
- Emc Task_space — versions 6.7
- Emc Web_publishers — versions 6.5
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (vdb-entry, x_refsource_XF)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (x_refsource_SECUNIA, third-party-advisory)
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)