Emc Eroom vulnerabilities

2 CVEs affecting Emc Eroom, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-2185, published 2005-07-11.

More from Emc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-2184, published 2005-07-11. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file.
• CVE-2005-2185, published 2005-07-11. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.