GCVE - cpe:2.3:a:emc:documentum_content_server:6.7:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_content_server:6.7:-:*:*:*:*:*:*

part: a version: 6.7 update: -

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Documentum Content Server (`1d7d59f1-0cb2-5632-8b01-2bf30ac2a356`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-4626`	vulnerable	2026-06-08 05:05:45.291216	Details available EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by (1) placing a command in a dm_job object and setting this object's owner to a privileged user or placing a rename action in a dm_job_request object and waiting for a (2) dm_UserRename or (3) dm_GroupRename service task, aka ESA-2014-105. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2515. Published: 2014-12-17T01:00:00.000Z Updated: 2024-08-06T11:20:26.633Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/315340 http://www.kb.cert.org/vuls/id/386056 http://www.kb.cert.org/vuls/id/874632 https://docs.google.com/spreadsheets/d/1DiiUPCPvmaliWcfwPSc36y2mDvuidkDKQBWqaIuJi0A/edit?usp=sharing	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4622`	vulnerable	2026-06-08 05:05:45.279688	Details available EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors. Published: 2014-09-17T10:00:00.000Z Updated: 2024-08-06T11:20:27.034Z Open on db.gcve.eu Reference links http://secunia.com/advisories/61251 http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/95990 http://www.securityfocus.com/bid/69819 http://www.securitytracker.com/id/1030855	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4621`	vulnerable	2026-06-08 05:05:45.279125	Details available EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors. Published: 2014-09-17T10:00:00.000Z Updated: 2024-08-06T11:20:26.948Z Open on db.gcve.eu Reference links http://secunia.com/advisories/61251 http://archives.neohapsis.com/archives/bugtraq/2014-09/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/95989 http://www.securityfocus.com/bid/69817 http://www.securitytracker.com/id/1030855	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4618`	vulnerable	2026-06-08 05:05:45.271074	Details available EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a user-created system object. Published: 2014-08-20T10:00:00.000Z Updated: 2024-08-06T11:20:26.627Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/95368 http://www.securitytracker.com/id/1030743 http://www.securityfocus.com/bid/69273 http://www.securityfocus.com/archive/1/533162/30/0/threaded http://secunia.com/advisories/60571	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2521`	vulnerable	2026-06-08 05:05:28.996599	Details available EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata via an RPC command. Published: 2014-08-20T10:00:00.000Z Updated: 2024-08-06T10:14:26.605Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1030743 http://www.securityfocus.com/bid/69276 http://www.securityfocus.com/archive/1/533162/30/0/threaded http://secunia.com/advisories/60571 https://exchange.xforce.ibmcloud.com/vulnerabilities/95370	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2520`	vulnerable	2026-06-08 05:05:28.994723	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2514`	vulnerable	2026-06-08 05:05:28.981972	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2513`	vulnerable	2026-06-08 05:05:28.981563	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2508`	vulnerable	2026-06-08 05:05:28.953798	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2507`	vulnerable	2026-06-08 05:05:28.953229	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2506`	vulnerable	2026-06-08 05:05:28.950956	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0642`	vulnerable	2026-06-08 05:05:13.862025	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.