6.8

CVE-2014-2518

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Digital Assets Manager Version6.5
Emc ≫ Digital Assets Manager Version6.5 Updatesp5
Emc ≫ Digital Assets Manager Version6.5 Updatesp6
Emc ≫ Documentum Administrator Version6.7
Emc ≫ Documentum Administrator Version6.7 Updatesp1
Emc ≫ Documentum Administrator Version6.7 Updatesp2
Emc ≫ Documentum Administrator Version7.0
Emc ≫ Documentum Administrator Version7.1
Emc ≫ Documentum Records Manager Version6.7 Updatesp1
Emc ≫ Documentum Records Manager Version6.7 Updatesp2
Emc ≫ Documentum Wdk Version6.7 Updatesp1
Emc ≫ Documentum Wdk Version6.7 Updatesp2
Emc ≫ Documentum Webtop Version6.7
Emc ≫ Documentum Webtop Version6.7 Updatesp1
Emc ≫ Documentum Webtop Version6.7 Updatesp2
Emc ≫ Task Space Version6.7 Updatesp1
Emc ≫ Task Space Version6.7 Updatesp2
Emc ≫ Web Publishers Version6.5 Updatesp6
Emc ≫ Web Publishers Version6.5 Updatesp7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.391
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.