← Back

CVE-2013-6173

nvd nist
Published: Nov 21, 2013Modified: Apr 29, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions in (1) xAdmin or (2) xDashboard.

Affected (9)

Emc
1 product
Document Sciences Xpression
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Emc
Document Sciences Xpression
Version 4.1 sp1
Document Sciences Xpression
Version 4.2
Document Sciences Xpression
Version 4.5
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Emc
Document Sciences Xpression
Version 4.1 sp1
Document Sciences Xpression
Version 4.2
Document Sciences Xpression
Version 4.5
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Emc
Document Sciences Xpression
Version 4.1 sp1
Document Sciences Xpression
Version 4.2
Document Sciences Xpression
Version 4.5

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (10)

Source: security_alert@emc.com
Source: security_alert@emc.com
Source: security_alert@emc.com
Source: security_alert@emc.com
US Government Resource
Source: security_alert@emc.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.