Emc Documentum Content Server — known CVE vulnerabilities

Every CVE whose affected-product data names Emc Documentum Content Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (21)

• CVE-2015-4531 — CVSS 9.0 (critical): EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly…
• CVE-2014-4629 — CVSS 9.0 (critical): EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary…
• CVE-2015-4544 — CVSS 9.0 (critical): EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job object access, which…
• CVE-2014-4626 — CVSS 9.0 (critical): EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users…
• CVE-2015-4534 — CVSS 9.0 (critical): Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2…
• CVE-2015-4533 — CVSS 9.0 (critical): EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly…
• CVE-2015-4532 — CVSS 9.0 (critical): EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly…
• CVE-2014-4621 — CVSS 8.5 (high): EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of…
• CVE-2014-2506 — CVSS 8.5 (high): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users…
• CVE-2014-2507 — CVSS 8.5 (high): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users…
• CVE-2014-4618 — CVSS 8.5 (high): EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to gain privileges via a…
• CVE-2014-2514 — CVSS 8.2 (high): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check…
• CVE-2014-2513 — CVSS 8.2 (high): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P15, 7.0 before P15, and 7.1 before P06 does not properly check…
• CVE-2015-4535 — CVSS 7.5 (high): Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2…
• CVE-2014-2508 — CVSS 7.5 (high): EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users…
• CVE-2014-4622 — CVSS 7.1 (high): EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups…
• CVE-2011-4144 — CVSS 6.8 (medium): Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local…
• CVE-2014-2520 — CVSS 6.3 (medium): EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL…
• CVE-2014-2521 — CVSS 6.3 (medium): EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07 allows remote authenticated users to read sensitive object metadata…
• CVE-2014-0642 — CVSS 5.5 (medium): EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users…
• CVE-2015-4536 — CVSS 3.5 (low): EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated…