CVE-2014-2512: XSS
Published Jul 1, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom 7.4.3, 7.4.4 before P19, and 7.4.4 SP1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
3 affected components
EMC Documentum eRoom=7.4.3
EMC Documentum eRoom=7.4.4
EMC Documentum eRoom=7.4.4-sp1
Event History
Jul 1, 2014
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-2512?
CVE-2014-2512 is classified as a medium severity vulnerability due to its potential for exploitation by authenticated users.
2
How do I fix CVE-2014-2512?
To fix CVE-2014-2512, ensure you upgrade to EMC Documentum eRoom version 7.4.4 P19 or later.
3
What types of systems are affected by CVE-2014-2512?
CVE-2014-2512 affects EMC Documentum eRoom versions 7.4.3, 7.4.4, and 7.4.4 SP1.
4
What type of vulnerability is CVE-2014-2512?
CVE-2014-2512 is a cross-site scripting (XSS) vulnerability.
5
Who can exploit CVE-2014-2512?
CVE-2014-2512 can be exploited by remote authenticated users through specific vectors.