Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp3:*:*:*:*:*:*

part: a version: 6.5 update: sp3

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum Digital Asset Manager (2933203a-1d40-594d-96dd-3157339bd520)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2503 vulnerable 2026-06-08 05:05:28.937580 Details available
The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query string.
Published: 2014-06-06T00:00:00.000Z
Updated: 2024-08-06T10:14:26.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3281 vulnerable 2026-06-08 05:04:30.771490 Details available
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL.
Published: 2013-11-06T11:00:00.000Z
Updated: 2024-08-06T16:07:37.418Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.