CVE-2016-8213: XSS
First published: Mon Jan 23 2017(Updated: )
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC Documentum Administrator | =7.0 | |
| EMC Documentum Administrator | =7.1 | |
| EMC Documentum Administrator | =7.2 | |
| EMC Documentum Capital Projects | =1.9 | |
| EMC Documentum Capital Projects | =1.10 | |
| EMC Documentum TaskSpace | =6.7-sp3 | |
| EMC Documentum Webtop | =6.8 | |
| EMC Documentum Webtop | =6.8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-8213?
CVE-2016-8213 is rated as a high severity vulnerability due to its potential impact on document management systems.
How do I fix CVE-2016-8213?
To fix CVE-2016-8213, you should update to the latest patches for the affected EMC Documentum software versions.
Which versions of EMC Documentum are affected by CVE-2016-8213?
CVE-2016-8213 affects EMC Documentum WebTop 6.8 prior to P18, WebTop 6.8.1 prior to P06, TaskSpace 6.7SP3 prior to P02, Capital Projects 1.9 prior to P30, and Administrator versions 7.0 and 7.1.
What types of attacks can exploit CVE-2016-8213?
CVE-2016-8213 can be exploited via unauthorized access to sensitive document management functionality.
Is there a workaround for CVE-2016-8213?
There are no known effective workarounds for CVE-2016-8213, so it is recommended to apply security patches.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- agent/source
- vendor/emc
- canonical/emc documentum administrator
- version/emc documentum administrator/7.0
- version/emc documentum administrator/7.1
- version/emc documentum administrator/7.2
- canonical/emc documentum capital projects
- version/emc documentum capital projects/1.9
- version/emc documentum capital projects/1.10
- canonical/emc documentum taskspace
- version/emc documentum taskspace/6.7-sp3
- canonical/emc documentum webtop
- version/emc documentum webtop/6.8
- version/emc documentum webtop/6.8.1