CVE-2014-4637

Published: Jan 7, 2015Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.

Affected (1)

Products: Emc: Documentum Wdk

Emc

1 product

Documentum Wdk

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Emc Documentum Wdk	Up to 6.7

References (6)

http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html

Source: security_alert@emc.com

http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html

Source: security_alert@emc.com

http://www.securitytracker.com/id/1031497

Source: security_alert@emc.com

http://archives.neohapsis.com/archives/bugtraq/2015-01/0009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/129822/EMC-Documentum-Web-Development-Kit-XSS-CSRF-Redirection-Injection.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031497

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.