CVE-2014-2510

The JAXB XML parser in EMC Documentum Foundation Services (DFS) 6.6 before P39, 6.7 SP1 before P28, and 6.7 SP2 before P15, as used in My Documentum for Desktop, My Documentum for Microsoft Outlook, and CenterStage, allows remote authenticated users to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:N/A:N
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
VendorProductVersion
emccenterstage
1.2:sp1
emccenterstage
1.2:sp2
emcdocumentum_foundation_services
6.6
emcdocumentum_foundation_services
6.7
emcdocumentum_foundation_services
6.7:sp1
emcdocumentum_foundation_services
6.7:sp2
emcmy_documentum_for_desktop
6.7.2
emcmy_documentum_for_microsoft_outlook
6.7:sp
emcmy_documentum_for_microsoft_outlook
6.7:sp2
emcmy_documentum_for_microsoft_outlook
6.7.1
emcmy_documentum_for_microsoft_outlook
6.7.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2014-07/0025.html
http://secunia.com/advisories/59773
http://www.securityfocus.com/bid/68434
http://www.securitytracker.com/id/1030528
http://archives.neohapsis.com/archives/bugtraq/2014-07/0025.html
http://secunia.com/advisories/59773
http://www.securityfocus.com/bid/68434
http://www.securitytracker.com/id/1030528