GCVE - cpe:2.3:a:emc:documentum_taskspace:6.7:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_taskspace:6.7:sp2:*:*:*:*:*:*

part: a version: 6.7 update: sp2

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Documentum Taskspace (`a7d8ae6d-be24-5f59-a43c-0bb43e3d40fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-4524`	vulnerable	2026-06-08 05:06:40.111836	Details available Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server. Published: 2015-07-04T14:00:00.000Z Updated: 2024-08-06T06:18:11.790Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032770 http://seclists.org/bugtraq/2015/Jul/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0551`	vulnerable	2026-06-08 05:06:21.745650	Details available Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Published: 2015-07-04T14:00:00.000Z Updated: 2024-08-06T04:10:10.974Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032770 http://seclists.org/bugtraq/2015/Jul/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0630`	vulnerable	2026-06-08 05:05:13.828891	Details available EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL. Published: 2014-03-06T11:00:00.000Z Updated: 2024-08-06T09:20:19.866Z Open on db.gcve.eu Reference links http://seclists.org/bugtraq/2014/Mar/33	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0629`	vulnerable	2026-06-08 05:05:13.828516	Details available EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm_world group and the dm_superusers_dynamic group, which allows remote authenticated users to obtain sensitive information and gain privileges in opportunistic circumstances by leveraging an incorrect group-addition implementation. Published: 2014-03-06T11:00:00.000Z Updated: 2024-08-06T09:20:19.739Z Open on db.gcve.eu Reference links http://seclists.org/bugtraq/2014/Mar/33	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.