Emc Digital Assets Manager vulnerabilities

2 CVEs affecting Emc Digital Assets Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2518, published 2014-08-20.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-2511, published 2014-08-20. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1)…
• CVE-2014-2518, published 2014-08-20. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.