CVE-2013-3281
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6, Documentum Administrator before 6.7 SP2 P07, and Documentum Capital Projects before 1.8 P01 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter in a URL.
Vulnerabilidad Cross-site scripting (XSS) en EMC Documentum Webtop 6.7 SP2 anterior a P07, Documentum WDK 6.7 SP2 anterior a P07, Documentum TaskSpace anterior a 6.7 SP2 P07, Documentum Records Manager 6.7 SP2 anterior a P07, Documentum Web Publisher anterior a 6.5 SP7, Documentum Digital Asset Manager anterior a 6.5 SP6, Documentum Administrador anterior a 6.7 SP2 P07 y Documentum Capitales Proyects anterior a 1.8 P01 que permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un parámetro diseñado en una URL.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-04-26 CVE Reserved
- 2013-11-05 CVE Published
- 2023-09-19 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2013-11/0018.html | Mailing List | |
| http://www.kb.cert.org/vuls/id/466876 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Emc Search vendor "Emc" | Documentum Taskspace Search vendor "Emc" for product "Documentum Taskspace" | <= 6.7 Search vendor "Emc" for product "Documentum Taskspace" and version " <= 6.7" | sp2 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Taskspace Search vendor "Emc" for product "Documentum Taskspace" | 6.7 Search vendor "Emc" for product "Documentum Taskspace" and version "6.7" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Taskspace Search vendor "Emc" for product "Documentum Taskspace" | 6.7 Search vendor "Emc" for product "Documentum Taskspace" and version "6.7" | sp1 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Capital Projects Search vendor "Emc" for product "Documentum Capital Projects" | <= 1.8 Search vendor "Emc" for product "Documentum Capital Projects" and version " <= 1.8" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Wdk Search vendor "Emc" for product "Documentum Wdk" | <= 6.7 Search vendor "Emc" for product "Documentum Wdk" and version " <= 6.7" | sp2 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Wdk Search vendor "Emc" for product "Documentum Wdk" | 6.7 Search vendor "Emc" for product "Documentum Wdk" and version "6.7" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Wdk Search vendor "Emc" for product "Documentum Wdk" | 6.7 Search vendor "Emc" for product "Documentum Wdk" and version "6.7" | sp1 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Digital Asset Manager Search vendor "Emc" for product "Documentum Digital Asset Manager" | <= 6.5 Search vendor "Emc" for product "Documentum Digital Asset Manager" and version " <= 6.5" | sp5 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Digital Asset Manager Search vendor "Emc" for product "Documentum Digital Asset Manager" | 6.5 Search vendor "Emc" for product "Documentum Digital Asset Manager" and version "6.5" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Digital Asset Manager Search vendor "Emc" for product "Documentum Digital Asset Manager" | 6.5 Search vendor "Emc" for product "Documentum Digital Asset Manager" and version "6.5" | sp1 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Digital Asset Manager Search vendor "Emc" for product "Documentum Digital Asset Manager" | 6.5 Search vendor "Emc" for product "Documentum Digital Asset Manager" and version "6.5" | sp2 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Digital Asset Manager Search vendor "Emc" for product "Documentum Digital Asset Manager" | 6.5 Search vendor "Emc" for product "Documentum Digital Asset Manager" and version "6.5" | sp3 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Digital Asset Manager Search vendor "Emc" for product "Documentum Digital Asset Manager" | 6.5 Search vendor "Emc" for product "Documentum Digital Asset Manager" and version "6.5" | sp4 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Administrator Search vendor "Emc" for product "Documentum Administrator" | <= 6.7 Search vendor "Emc" for product "Documentum Administrator" and version " <= 6.7" | sp2 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Administrator Search vendor "Emc" for product "Documentum Administrator" | 6.7 Search vendor "Emc" for product "Documentum Administrator" and version "6.7" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Administrator Search vendor "Emc" for product "Documentum Administrator" | 6.7 Search vendor "Emc" for product "Documentum Administrator" and version "6.7" | sp1 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Webtop Search vendor "Emc" for product "Documentum Webtop" | <= 6.7 Search vendor "Emc" for product "Documentum Webtop" and version " <= 6.7" | sp2 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Webtop Search vendor "Emc" for product "Documentum Webtop" | 6.7 Search vendor "Emc" for product "Documentum Webtop" and version "6.7" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Webtop Search vendor "Emc" for product "Documentum Webtop" | 6.7 Search vendor "Emc" for product "Documentum Webtop" and version "6.7" | sp1 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | <= 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version " <= 6.5" | sp6 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version "6.5" | - |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version "6.5" | sp1 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version "6.5" | sp2 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version "6.5" | sp3 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version "6.5" | sp4 |
Affected
| ||||||
| Emc Search vendor "Emc" | Documentum Web Publisher Search vendor "Emc" for product "Documentum Web Publisher" | 6.5 Search vendor "Emc" for product "Documentum Web Publisher" and version "6.5" | sp5 |
Affected
| ||||||