CVE-2015-4524

Published: Jul 4, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.

Affected (12)

Products: Emc: Documentum Administrator, Documentum Digital Asset Manager, Documentum Taskspace, Documentum Web Publisher, Documentum Webtop

Emc

5 products

Documentum Administrator

Documentum Digital Asset Manager

Documentum Taskspace

Documentum Web Publisher

Documentum Webtop

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Emc Documentum Administrator	Version 6.7 sp1
Emc Documentum Administrator	Version 6.7 sp2
Emc Documentum Administrator	Version 7.0
Emc Documentum Administrator	Version 7.1
Emc Documentum Administrator	Version 7.2
Emc Documentum Digital Asset Manager	Version 6.5 sp6
Emc Documentum Taskspace	Version 6.7 sp1
Emc Documentum Taskspace	Version 6.7 sp2
Emc Documentum Web Publisher	Version 6.5 sp7
Emc Documentum Webtop	Version 6.7 sp1
Emc Documentum Webtop	Version 6.7 sp2
Emc Documentum Webtop	Version 6.8