CVE-2014-2511

Published: Aug 20, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId parameter.

Affected (24)

Products: Emc: Digital Assets Manager, Documentum Administrator, Documentum Capital Projects, Documentum Webtop, Engineering Plant Facilities Management Solution For Documentum, Records Client, Task Space, Web Publishers

Emc

8 products

Digital Assets Manager

Documentum Administrator

Documentum Capital Projects

Documentum Webtop

Engineering Plant Facilities Management Solution For Documentum

Records Client

Task Space

Web Publishers

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Emc Digital Assets Manager	Version 6.5
Emc Digital Assets Manager	Version 6.5 sp5
Emc Digital Assets Manager	Version 6.5 sp6
Emc Documentum Administrator	Version 6.7
Emc Documentum Administrator	Version 6.7 sp1
Emc Documentum Administrator	Version 6.7 sp2
Emc Documentum Administrator	Version 7.0
Emc Documentum Administrator	Version 7.1
Emc Documentum Capital Projects	Version 1.8
Emc Documentum Capital Projects	Version 1.9
Emc Documentum Webtop	Version 6.7
Emc Documentum Webtop	Version 6.7 sp1
Emc Documentum Webtop	Version 6.7 sp2
Emc Engineering Plant Facilities Management Solution For Documentum	Version 1.7
Emc Engineering Plant Facilities Management Solution For Documentum	Version 1.7 sp1
Emc Records Client	Version 6.7
Emc Records Client	Version 6.7 sp1
Emc Records Client	Version 6.7 sp2
Emc Task Space	Version 6.7
Emc Task Space	Version 6.7 sp1
Emc Task Space	Version 6.7 sp2
Emc Web Publishers	Version 6.5
Emc Web Publishers	Version 6.5 sp6
Emc Web Publishers	Version 6.5 sp7