Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_content_server:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum Content Server (1d7d59f1-0cb2-5632-8b01-2bf30ac2a356)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-4544 vulnerable 2026-06-08 05:06:40.151499 Details available
EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which allows remote authenticated users to obtain superuser privileges via crafted object operations. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4626.
Published: 2015-09-04T01:00:00.000Z
Updated: 2024-08-06T06:18:11.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4536 vulnerable 2026-06-08 05:06:40.134307 Details available
EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.792Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4535 vulnerable 2026-06-08 05:06:40.133991 Details available
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, when __debug_trace__ is configured, allows remote authenticated users to gain super-user privileges by leveraging the ability to read a log file containing a login ticket.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4534 vulnerable 2026-06-08 05:06:40.133627 Details available
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:11.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4533 vulnerable 2026-06-08 05:06:40.133250 Details available
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.
Published: 2015-08-20T10:00:00.000Z
Updated: 2024-08-06T06:18:12.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4532 vulnerable 2026-06-08 05:06:40.132853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4531 vulnerable 2026-06-08 05:06:40.131865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4629 vulnerable 2026-06-08 05:05:45.300106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4626 vulnerable 2026-06-08 05:05:45.292101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4622 vulnerable 2026-06-08 05:05:45.279737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4621 vulnerable 2026-06-08 05:05:45.279181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4618 vulnerable 2026-06-08 05:05:45.272621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2521 vulnerable 2026-06-08 05:05:28.996650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2520 vulnerable 2026-06-08 05:05:28.996032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2514 vulnerable 2026-06-08 05:05:28.982025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2513 vulnerable 2026-06-08 05:05:28.981617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2508 vulnerable 2026-06-08 05:05:28.953844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2507 vulnerable 2026-06-08 05:05:28.953284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2506 vulnerable 2026-06-08 05:05:28.952569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0642 vulnerable 2026-06-08 05:05:13.863521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.