CVE-2013-3281 Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7....
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum taskspace | <= 6.7 | No fix listed |
| emc documentum taskspace | = 6.7 | No fix listed |
| emc documentum taskspace | = 6.7-sp1 | No fix listed |
| emc documentum capital projects | <= 1.8 | No fix listed |
| emc documentum wdk | <= 6.7 | No fix listed |
| emc documentum wdk | = 6.7 | No fix listed |
| emc documentum wdk | = 6.7-sp1 | No fix listed |
| emc documentum digital asset manager | <= 6.5 | No fix listed |
| emc documentum digital asset manager | = 6.5 | No fix listed |
| emc documentum digital asset manager | = 6.5-sp1 | No fix listed |
| emc documentum digital asset manager | = 6.5-sp2 | No fix listed |
| emc documentum digital asset manager | = 6.5-sp3 | No fix listed |
| emc documentum digital asset manager | = 6.5-sp4 | No fix listed |
| emc documentum administrator | <= 6.7 | No fix listed |
| emc documentum administrator | = 6.7 | No fix listed |
| emc documentum administrator | = 6.7-sp1 | No fix listed |
| emc documentum webtop | <= 6.7 | No fix listed |
| emc documentum webtop | = 6.7 | No fix listed |
| emc documentum webtop | = 6.7-sp1 | No fix listed |
| emc documentum web publisher | <= 6.5 | No fix listed |
| emc documentum web publisher | = 6.5 | No fix listed |
| emc documentum web publisher | = 6.5-sp1 | No fix listed |
| emc documentum web publisher | = 6.5-sp2 | No fix listed |
| emc documentum web publisher | = 6.5-sp3 | No fix listed |
| emc documentum web publisher | = 6.5-sp4 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum web publisher | = 6.5-sp5 | No fix listed |
References
- 20131105 ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability. mailing-list
- VU#466876 third-party-advisory us-government-resource