Emc Document Sciences Xpression vulnerabilities

6 CVEs affecting Emc Document Sciences Xpression, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0540, published 2015-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6174, published 2013-11-21. Medium severity, CVSS 5.8. EPSS: 2.4% chance of exploitation in the next 30 days. Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise…
CVE-2013-6177, published 2013-11-21. Low severity, CVSS 3.5. EPSS: 2.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish…
CVE-2013-6175, published 2013-11-21. Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise…
CVE-2013-6176, published 2013-11-21. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition…
CVE-2013-6173, published 2013-11-21. Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition,…
CVE-2015-0540, published 2015-05-25. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to execute arbitrary SQL commands via…