CVEvulnerability
CVE-2014-2512
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom 7.4.3, 7.4.4 before P19, and 7.4.4 SP1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• emc documentum eroom 7.4.3
• emc documentum eroom 7.4.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0176.html archives.neohapsis.com
- http://packetstormsecurity.com/files/127309/EMC-Documentum-eRoom-Cross-Site-Scripting.html packetstormsecurity.com
- http://packetstormsecurity.com/files/127321/EMC-Documentum-eRoom-Stored-Cross-Site-Scripting.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Jul/0 Exploit
- http://secunia.com/advisories/59419 secunia.com
- http://www.securityfocus.com/archive/1/532608/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id/1030493 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0176.html archives.neohapsis.com
- http://packetstormsecurity.com/files/127309/EMC-Documentum-eRoom-Cross-Site-Scripting.html packetstormsecurity.com
- http://packetstormsecurity.com/files/127321/EMC-Documentum-eRoom-Stored-Cross-Site-Scripting.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Jul/0 Exploit
- http://secunia.com/advisories/59419 secunia.com
- http://www.securityfocus.com/archive/1/532608/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id/1030493 www.securitytracker.com