GCVE - cpe:2.3:a:emc:documentum_content_server:*:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_content_server:*:sp2:*:*:*:*:*:*

part: a version: * update: sp2

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Documentum Content Server (`1d7d59f1-0cb2-5632-8b01-2bf30ac2a356`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-4622`	vulnerable	2026-06-08 05:05:45.279566	Details available EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors. Published: 2014-09-17T10:00:00.000Z Updated: 2024-08-06T11:20:27.034Z Open on db.gcve.eu Reference links http://secunia.com/advisories/61251 http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/95990 http://www.securityfocus.com/bid/69819 http://www.securitytracker.com/id/1030855	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4621`	vulnerable	2026-06-08 05:05:45.278993	Details available EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors. Published: 2014-09-17T10:00:00.000Z Updated: 2024-08-06T11:20:26.948Z Open on db.gcve.eu Reference links http://secunia.com/advisories/61251 http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/95989 http://www.securityfocus.com/bid/69817 http://www.securitytracker.com/id/1030855	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4618`	vulnerable	2026-06-08 05:05:45.267329	Details available EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object. Published: 2014-08-20T10:00:00.000Z Updated: 2024-08-06T11:20:26.627Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/95368 http://www.securitytracker.com/id/1030743 http://www.securityfocus.com/bid/69273 http://www.securityfocus.com/archive/1/533162/30/0/threaded http://secunia.com/advisories/60571	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2521`	vulnerable	2026-06-08 05:05:28.996472	Details available EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC command. Published: 2014-08-20T10:00:00.000Z Updated: 2024-08-06T10:14:26.605Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1030743 http://www.securityfocus.com/bid/69276 http://www.securityfocus.com/archive/1/533162/30/0/threaded http://secunia.com/advisories/60571 https://exchange.xforce.ibmcloud.com/vulnerabilities/95370	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2520`	vulnerable	2026-06-08 05:05:28.994561	Details available EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request. Published: 2014-08-20T10:00:00.000Z Updated: 2024-08-06T10:14:26.572Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1030743 https://exchange.xforce.ibmcloud.com/vulnerabilities/95369 http://www.securityfocus.com/archive/1/533162/30/0/threaded http://secunia.com/advisories/60571 http://www.securityfocus.com/bid/69274	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.