CVE-2014-2512

Mô tả

Tham khảo

• archives.neohapsis.com/archives/bugtraq/2014-06/0176.html
• packetstormsecurity.com/files/127309/EMC-Documentum-eRoom-Cross-Site-Scripting.html
• packetstormsecurity.com/files/127321/EMC-Documentum-eRoom-Stored-Cross-Site-Scripting.html
• seclists.org/fulldisclosure/2014/Jul/0 · Exploit
• secunia.com/advisories/59419
• securityfocus.com/archive/1/532608/100/0/threaded
• securitytracker.com/id/1030493

Lỗ hổng khác của documentum eroom

• CVE-2017-2766NGHIÊM TRỌNG 9.8EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum …
• CVE-2013-3286TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11 allow remote attackers to inject arbitrary web …
• CVE-2012-0404TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2012-0398CAO 7.5EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via…
• CVE-2011-2739CAO 8.5The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of fil…