Browse CVEs

HIGH 7.5 CVE-2015-4535 Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, w… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4534 Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 al… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4533 EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check author… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4532 EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check author… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4531 EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check author… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 MEDIUM 6.8 CVE-2015-0542 Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authenticatio… Rsa Archer Egrc Mitigation only Fix from $1,6002015-08-20 HIGH 7.8 CVE-2015-4527 Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote attackers to… Avamar Server Mitigation only Fix from $1,9502015-07-23 HIGH 7.2 CVE-2015-4526 EMC RecoverPoint for Virtual Machines (VMs) 4.2 allows local users to obtain root-shell access by bypassing the Installation Manager Boxmgmt CLI inte… Recoverpoint For Virtual Machines Mitigation only Fix from $1,9502015-07-10 HIGH 9.3 CVE-2015-0544 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it eas… Secure Remote Services Mitigation only Fix from $1,9502015-07-05 MEDIUM 5.8 CVE-2015-0543 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-i… Secure Remote Services Mitigation only Fix from $1,6002015-07-05 MEDIUM 6.5 CVE-2015-4524 Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.… Documentum Administrator Mitigation only Fix from $1,6002015-07-04 HIGH 10.0 CVE-2015-0545 EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary… Unisphere Mitigation only Fix from $1,9502015-06-29 HIGH 8.5 CVE-2015-0550 Directory traversal vulnerability in EMC Documentum Thumbnail Server 6.7SP1 before P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be… Documentum Thumbnail Server Mitigation only Fix from $1,9502015-06-28 HIGH 10.0 CVE-2015-0546 EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name. Unified Infrastructure Manager\/provisioning Mitigation only Fix from $1,9502015-06-17 MEDIUM 6.5 CVE-2015-0540 SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authentica… Document Sciences Xpression Mitigation only Fix from $1,6002015-05-25 HIGH 7.5 CVE-2015-0532 EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote … Rsa Identity Management And Governance No fix yet Fix from $1,9502015-05-01 HIGH 7.5 CVE-2015-0525 The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary O… Secure Remote Services No fix yet Fix from $1,9502015-03-12 HIGH 7.5 CVE-2015-0524 SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote a… Secure Remote Services No fix yet Fix from $1,9502015-03-12 HIGH 9.0 CVE-2015-0518 The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows … Documentum D2 Mitigation only Fix from $1,9502015-02-14 MEDIUM 5.8 CVE-2014-2516 Open redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows remote attackers to redirect users to arbitrary web sites… Rsa Authentication Manager Mitigation only Fix from $1,6002014-12-12 MEDIUM 5.0 CVE-2014-4631 RSA Adaptive Authentication (On-Premise) 6.0.2.1 through 7.1 P3, when using device binding in a Challenge SOAP call or using the RSA Adaptive Authent… Rsa Adaptive Authentication On Premise Mitigation only Fix from $1,6002014-12-08 HIGH 9.0 CVE-2014-4629 EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via… Documentum Content Server No fix yet Fix from $1,9502014-12-06 HIGH 9.3 CVE-2014-4619 EMC RSA Identity Management and Governance (IMG) 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manag… Rsa Identity Management And Governance No fix yet Fix from $1,9502014-08-28 HIGH 8.5 CVE-2014-2515 EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided b… Documentum D2 Mitigation only Fix from $1,9502014-08-20 MEDIUM 6.8 CVE-2014-0641 Cross-site request forgery (CSRF) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authenticatio… Rsa Archer Egrc Mitigation only Fix from $1,6002014-08-20 MEDIUM 6.8 CVE-2014-2518 Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hi… Digital Assets Manager Mitigation only Fix from $1,6002014-08-20 MEDIUM 6.5 CVE-2014-2517 Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors. Rsa Archer Egrc Mitigation only Fix from $1,6002014-08-20 MEDIUM 5.4 CVE-2014-2505 EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product… Rsa Archer Egrc Mitigation only Fix from $1,6002014-08-20 MEDIUM 5.8 CVE-2014-2519 The default configuration of EMC RecoverPoint Appliance (RPA) 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain … Recoverpoint Appliance Mitigation only Fix from $1,6002014-07-19 MEDIUM 6.8 CVE-2014-2510 The JAXB XML parser in EMC Documentum Foundation Services (DFS) 6.6 before P39, 6.7 SP1 before P28, and 6.7 SP2 before P15, as used in My Documentum … Centerstage Mitigation only Fix from $1,6002014-07-08