CVE-2014-2512

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2014-06/0176.html
• packetstormsecurity.com/files/127309/EMC-Documentum-eRoom-Cross-Site-Scripting.html
• packetstormsecurity.com/files/127321/EMC-Documentum-eRoom-Stored-Cross-Site-Scripting.html
• seclists.org/fulldisclosure/2014/Jul/0 · Exploit
• secunia.com/advisories/59419
• securityfocus.com/archive/1/532608/100/0/threaded
• securitytracker.com/id/1030493

documentum eroom のその他の脆弱性

• CVE-2017-2766緊急 9.8EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum …
• CVE-2013-3286中 4.3Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11 allow remote attackers to inject arbitrary web …
• CVE-2012-0404中 4.3Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2012-0398高 7.5EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via…
• CVE-2011-2739高 8.5The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of fil…