XSS in Emc Documentum Eroom
CVE-2014-2512
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom 7.4.3, 7.4.4 before P19, and 7.4.4 SP1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.016 (73.6th percentile) — read the EPSS interpretation.
Affected products
- Emc Documentum_eroom — versions 7.4.3, 7.4.4
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_MISC)
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
- security_alert@emc.com (x_refsource_SECUNIA, third-party-advisory)
- security_alert@emc.com (x_refsource_MISC)
- security_alert@emc.com (mailing-list, Exploit, x_refsource_FULLDISC)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)