CVE-2014-4629

EPSS 0.68%
Published 06.12.2014 15:59:01
Last modified 12.04.2025 10:46:40
Source security_alert@emc.com
Teams watchlist Login
Open Login

EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Emc ≫ Documentum Content Server Version6.7

Emc ≫ Documentum Content Server Version6.7 Updatesp1

Emc ≫ Documentum Content Server Version6.7 Updatesp2

Emc ≫ Documentum Content Server Version7.0

Emc ≫ Documentum Content Server Version7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.68%	0.694

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

http://packetstormsecurity.com/files/129376/EMC-Documentum-Content-Server-Insecure-Direct-Object-Reference.html

http://www.securityfocus.com/archive/1/534135/100/0/threaded

http://www.securityfocus.com/bid/71422

http://www.securitytracker.com/id/1031298

https://exchange.xforce.ibmcloud.com/vulnerabilities/99085

https://nvd.nist.gov/vuln/detail/CVE-2014-4629

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4629

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4629

EUVD