Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_webtop:6.7:*:*:*:*:*:*:*

part: a version: 6.7 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum Webtop (89c6f514-1254-5d59-b8c0-62e895e07392)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2518 vulnerable 2026-06-08 05:05:28.991136 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
Published: 2014-08-20T10:00:00.000Z
Updated: 2024-08-06T10:14:26.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2511 vulnerable 2026-06-08 05:05:28.972229 Details available
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId parameter.
Published: 2014-08-20T10:00:00.000Z
Updated: 2024-08-06T10:14:26.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3281 vulnerable 2026-06-08 05:04:30.775050 Details available
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL.
Published: 2013-11-06T11:00:00.000Z
Updated: 2024-08-06T16:07:37.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0939 vulnerable 2026-06-08 05:03:51.233642 Details available
EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting" issue.
Published: 2013-05-10T10:00:00.000Z
Updated: 2024-09-17T02:27:10.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0938 vulnerable 2026-06-08 05:03:51.233221 Details available
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-05-10T10:00:00.000Z
Updated: 2024-09-16T21:57:44.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0937 vulnerable 2026-06-08 05:03:51.232189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.