Emc Documentum Administrator vulnerabilities

10 CVEs affecting Emc Documentum Administrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8213, published 2017-01-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0656, published 2008-02-07. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
CVE-2015-4524, published 2015-07-04. Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days. Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before…
CVE-2015-4529, published 2015-07-16. Medium severity, CVSS 5.8. EPSS: 1.8% chance of exploitation in the next 30 days. Open redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator before 7.2P01, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7,…
CVE-2014-2511, published 2014-08-20. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2016-0914, published 2016-06-23. Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days. EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and…
CVE-2015-0551, published 2015-07-04. Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23,…
CVE-2013-3281, published 2013-11-06. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7…
CVE-2014-2518, published 2014-08-20. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.
CVE-2016-8213, published 2017-01-23. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to…
CVE-2015-4530, published 2015-08-20. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web…