Emc Documentum Eroom vulnerabilities
7 CVEs affecting Emc Documentum Eroom, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2766, published 2017-02-03.
More from Emc.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2011-1741, published 2011-07-19. High severity, CVSS 10.0. EPSS: 8.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote…
- CVE-2011-2739, published 2011-11-09. High severity, CVSS 8.5. EPSS: 2.7% chance of exploitation in the next 30 days. The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote…
- CVE-2017-2766, published 2017-02-03. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified…
- CVE-2014-2512, published 2014-07-01. Low severity, CVSS 3.5. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom 7.4.3, 7.4.4 before P19, and 7.4.4 SP1 allow remote authenticated users to inject arbitrary web script or HTML via…
- CVE-2012-0398, published 2012-03-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.
- CVE-2013-3286, published 2013-11-06. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
- CVE-2012-0404, published 2012-03-15. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.