EMC Documentum Content Server 6.7 Service Pack 1
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:documentum_content_server:6.7:sp1:*:*:*:*:*:*
part: a version: 6.7 update: sp1
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Documentum Content Server (1d7d59f1-0cb2-5632-8b01-2bf30ac2a356) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-4535 |
vulnerable | 2026-06-08 05:06:40.133935 |
Details available
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is configured, allows remote authenticated users to gain super-user privileges by leveraging the ability to read a log file containing a login ticket.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.582Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4534 |
vulnerable | 2026-06-08 05:06:40.133572 |
Details available
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.885Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4533 |
vulnerable | 2026-06-08 05:06:40.133193 |
Details available
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:12.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4532 |
vulnerable | 2026-06-08 05:06:40.132790 |
Details available
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2514.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4531 |
vulnerable | 2026-06-08 05:06:40.130303 |
Details available
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server actions, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4622.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4629 |
vulnerable | 2026-06-08 05:05:45.300044 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4622 |
vulnerable | 2026-06-08 05:05:45.279704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4621 |
vulnerable | 2026-06-08 05:05:45.279140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4618 |
vulnerable | 2026-06-08 05:05:45.271587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2521 |
vulnerable | 2026-06-08 05:05:28.996616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2520 |
vulnerable | 2026-06-08 05:05:28.995961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.