CVE-2014-2518

Published: Aug 20, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.

Affected (23)

Products: Emc: Digital Assets Manager, Documentum Administrator, Documentum Capital Projects, Documentum Records Manager, Documentum Wdk, Documentum Webtop, Engineering Plant Facilities Management Solution For Documentum, Task Space, Web Publishers

Emc

9 products

Digital Assets Manager

Documentum Administrator

Documentum Capital Projects

Documentum Records Manager

Documentum Wdk

Documentum Webtop

Engineering Plant Facilities Management Solution For Documentum

Task Space

Web Publishers

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Emc Digital Assets Manager	Version 6.5
Emc Digital Assets Manager	Version 6.5 sp5
Emc Digital Assets Manager	Version 6.5 sp6
Emc Documentum Administrator	Version 6.7
Emc Documentum Administrator	Version 6.7 sp1
Emc Documentum Administrator	Version 6.7 sp2
Emc Documentum Administrator	Version 7.0
Emc Documentum Administrator	Version 7.1
Emc Documentum Capital Projects	Version 1.8
Emc Documentum Capital Projects	Version 1.9
Emc Documentum Records Manager	Version 6.7
Emc Documentum Records Manager	Version 6.7 sp1
Emc Documentum Records Manager	Version 6.7 sp2
Emc Documentum Wdk	Version 6.7 sp1
Emc Documentum Wdk	Version 6.7 sp2
Emc Documentum Webtop	Version 6.7
Emc Documentum Webtop	Version 6.7 sp1
Emc Documentum Webtop	Version 6.7 sp2
Emc Engineering Plant Facilities Management Solution For Documentum	Version 1.7 sp1
Emc Task Space	Version 6.7 sp1
Emc Task Space	Version 6.7 sp2
Emc Web Publishers	Version 6.5 sp6
Emc Web Publishers	Version 6.5 sp7