Documentum Wdk
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:documentum_wdk:*:sp2:*:*:*:*:*:*
part: a version: * update: sp2
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Documentum Wdk (9feb4ec8-b558-5226-b19c-19eca89669b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-4639 |
vulnerable | 2026-06-08 05:05:45.330432 |
Details available
EMC Documentum Web Development Kit (WDK) before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value.
Published: 2015-01-07T02:00:00.000Z
Updated: 2024-08-06T11:20:26.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4638 |
vulnerable | 2026-06-08 05:05:45.330106 |
Details available
EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors.
Published: 2015-01-07T02:00:00.000Z
Updated: 2024-08-06T11:20:26.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4637 |
vulnerable | 2026-06-08 05:05:45.329795 |
Details available
Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.
Published: 2015-01-07T02:00:00.000Z
Updated: 2024-08-06T11:20:26.999Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4636 |
vulnerable | 2026-06-08 05:05:45.329474 |
Details available
Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations.
Published: 2015-01-07T02:00:00.000Z
Updated: 2024-08-06T11:20:26.765Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4635 |
vulnerable | 2026-06-08 05:05:45.329078 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum Web Development Kit (WDK) before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-01-07T02:00:00.000Z
Updated: 2024-08-06T11:20:26.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3281 |
vulnerable | 2026-06-08 05:04:30.767258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.