Lucene search

DellCVE-2013-3281

HistoryNov 06, 2013 - 3:55 p.m.

CVE-2013-3281

2013-11-0615:55:05

CWE-79

dell

web.nvd.nist.gov

cve

2013

3281

cross-site scripting

xss

emc

documentum

webtop

wdk

taskspace

records manager

web publisher

digital asset manager

administrator

capital projects

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL.

Affected configurations

Nvd

Node

emcdocumentum_taskspaceRange≤6.7sp2

emcdocumentum_taskspaceMatch6.7

emcdocumentum_taskspaceMatch6.7sp1

Node

emcdocumentum_capital_projectsRange≤1.8

Node

emcdocumentum_wdkRange≤6.7sp2

emcdocumentum_wdkMatch6.7

emcdocumentum_wdkMatch6.7sp1

Node

emcdocumentum_digital_asset_managerRange≤6.5sp5

emcdocumentum_digital_asset_managerMatch6.5

emcdocumentum_digital_asset_managerMatch6.5sp1

emcdocumentum_digital_asset_managerMatch6.5sp2

emcdocumentum_digital_asset_managerMatch6.5sp3

emcdocumentum_digital_asset_managerMatch6.5sp4

Node

emcdocumentum_administratorRange≤6.7sp2

emcdocumentum_administratorMatch6.7

emcdocumentum_administratorMatch6.7sp1

Node

emcdocumentum_webtopRange≤6.7sp2

emcdocumentum_webtopMatch6.7

emcdocumentum_webtopMatch6.7sp1

Node

emcdocumentum_web_publisherRange≤6.5sp6

emcdocumentum_web_publisherMatch6.5

emcdocumentum_web_publisherMatch6.5sp1

emcdocumentum_web_publisherMatch6.5sp2

emcdocumentum_web_publisherMatch6.5sp3

emcdocumentum_web_publisherMatch6.5sp4

emcdocumentum_web_publisherMatch6.5sp5

VendorProductVersionCPE
emcdocumentum_taskspace*cpe:2.3:a:emc:documentum_taskspace:*:sp2:*:*:*:*:*:*
emcdocumentum_taskspace6.7cpe:2.3:a:emc:documentum_taskspace:6.7:*:*:*:*:*:*:*
emcdocumentum_taskspace6.7cpe:2.3:a:emc:documentum_taskspace:6.7:sp1:*:*:*:*:*:*
emcdocumentum_capital_projects*cpe:2.3:a:emc:documentum_capital_projects:*:*:*:*:*:*:*:*
emcdocumentum_wdk*cpe:2.3:a:emc:documentum_wdk:*:sp2:*:*:*:*:*:*
emcdocumentum_wdk6.7cpe:2.3:a:emc:documentum_wdk:6.7:*:*:*:*:*:*:*
emcdocumentum_wdk6.7cpe:2.3:a:emc:documentum_wdk:6.7:sp1:*:*:*:*:*:*
emcdocumentum_digital_asset_manager*cpe:2.3:a:emc:documentum_digital_asset_manager:*:sp5:*:*:*:*:*:*
emcdocumentum_digital_asset_manager6.5cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:*:*:*:*:*:*:*
emcdocumentum_digital_asset_manager6.5cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	documentum_taskspace	*	cpe:2.3:a:emc:documentum_taskspace::sp2::::::*
emc	documentum_taskspace	6.7	cpe:2.3:a:emc:documentum_taskspace:6.7:::::::*
emc	documentum_taskspace	6.7	cpe:2.3:a:emc:documentum_taskspace:6.7:sp1::::::
emc	documentum_capital_projects	*	cpe:2.3:a:emc:documentum_capital_projects::::::::
emc	documentum_wdk	*	cpe:2.3:a:emc:documentum_wdk::sp2::::::*
emc	documentum_wdk	6.7	cpe:2.3:a:emc:documentum_wdk:6.7:::::::*
emc	documentum_wdk	6.7	cpe:2.3:a:emc:documentum_wdk:6.7:sp1::::::
emc	documentum_digital_asset_manager	*	cpe:2.3:a:emc:documentum_digital_asset_manager::sp5::::::*
emc	documentum_digital_asset_manager	6.5	cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:::::::*
emc	documentum_digital_asset_manager	6.5	cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp1::::::

Rows per page:

1-10 of 261

References

archives.neohapsis.com/archives/bugtraq/2013-11/0018.html

www.kb.cert.org/vuls/id/466876

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Related for CVE-2013-3281