Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_content_server:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum Content Server (1d7d59f1-0cb2-5632-8b01-2bf30ac2a356)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-4536 vulnerable 2026-06-08 05:06:40.134287 Details available
EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.792Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4535 vulnerable 2026-06-08 05:06:40.133975 Details available
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is configured, allows remote authenticated users to gain super-user privileges by leveraging the ability to read a log file containing a login ticket.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4534 vulnerable 2026-06-08 05:06:40.133610 Details available
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4533 vulnerable 2026-06-08 05:06:40.133233 Details available
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:12.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4532 vulnerable 2026-06-08 05:06:40.132835 Details available
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, and consequently execute arbitrary code, via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2514.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4531 vulnerable 2026-06-08 05:06:40.131389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4629 vulnerable 2026-06-08 05:05:45.300088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4626 vulnerable 2026-06-08 05:05:45.292075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4622 vulnerable 2026-06-08 05:05:45.279721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4621 vulnerable 2026-06-08 05:05:45.279164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4618 vulnerable 2026-06-08 05:05:45.272119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2521 vulnerable 2026-06-08 05:05:28.996633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2520 vulnerable 2026-06-08 05:05:28.996006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2514 vulnerable 2026-06-08 05:05:28.982009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2513 vulnerable 2026-06-08 05:05:28.981600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2508 vulnerable 2026-06-08 05:05:28.953829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2507 vulnerable 2026-06-08 05:05:28.953266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2506 vulnerable 2026-06-08 05:05:28.952056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0642 vulnerable 2026-06-08 05:05:13.863049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.