Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_capital_projects:1.9:*:*:*:*:*:*:*

part: a version: 1.9 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum Capital Projects (41a0ef49-1eaa-528a-8b1e-e1c7143912f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8213 vulnerable 2026-06-08 05:08:13.840305 Details available
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Published: 2017-01-23T06:49:00.000Z
Updated: 2024-08-06T02:13:21.796Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0914 vulnerable 2026-06-08 05:07:16.537660 Details available
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.
Published: 2016-06-23T00:00:00.000Z
Updated: 2024-08-05T22:38:41.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2518 vulnerable 2026-06-08 05:05:28.986798 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
Published: 2014-08-20T10:00:00.000Z
Updated: 2024-08-06T10:14:26.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2511 vulnerable 2026-06-08 05:05:28.971689 Details available
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId parameter.
Published: 2014-08-20T10:00:00.000Z
Updated: 2024-08-06T10:14:26.830Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.