EMC Documentum eRoom CVE-2013-3286 Multiple Unspecified Cross Site Scripting Vulnerabilities
BID:63525
Info
EMC Documentum eRoom CVE-2013-3286 Multiple Unspecified Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 63525 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-3286 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2013 12:00AM |
| Updated: | Nov 05 2013 12:00AM |
| Credit: | SEC Consult |
| Vulnerable: |
EMC Documentum eRoom 7.4.4 EMC Documentum eRoom 7.4.2 EMC Documentum eRoom 7.4.1 EMC Documentum eRoom 7.4.3g EMC Documentum eRoom 7.4.3.f EMC Documentum eRoom 7.4.3.f EMC Documentum eRoom 7.4.3 EMC Documentum eRoom 7.4.3 |
| Not Vulnerable: | |
Discussion
EMC Documentum eRoom CVE-2013-3286 Multiple Unspecified Cross Site Scripting Vulnerabilities
EMC Documentum eRoom is prone to multiple unspecified cross-site scripting vulnerabilities.
An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
EMC Documentum eRoom versions prior to 7.4.4 P11 are vulnerable.
EMC Documentum eRoom is prone to multiple unspecified cross-site scripting vulnerabilities.
An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
EMC Documentum eRoom versions prior to 7.4.4 P11 are vulnerable.
Exploit / POC
EMC Documentum eRoom CVE-2013-3286 Multiple Unspecified Cross Site Scripting Vulnerabilities
An attacker must trick a victim into following a malicious URI to exploit multiple cross-site scripting issues.
An attacker must trick a victim into following a malicious URI to exploit multiple cross-site scripting issues.
Solution / Fix
EMC Documentum eRoom CVE-2013-3286 Multiple Unspecified Cross Site Scripting Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
EMC Documentum eRoom CVE-2013-3286 Multiple Unspecified Cross Site Scripting Vulnerabilities
References:
References: