CVE-2015-4524: emc documentum_administrator
Vulnerability summary
CVE-2015-4524 is a medium (CVSS 6.5) vulnerability in emc documentum_administrator. EPSS estimates a 2.38% chance of exploitation in the next 30 days, higher than 83.6% of scored vulnerabilities.
Timeline
- 04-07-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.38%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
-0.02 pp
From 2.40% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Emc5 products
- documentum_administrator6.7:sp1 | 6.7:sp2 | 7.0 | 7.1 | 7.2
- documentum_digital_asset_manager6.5:sp6
- documentum_taskspace6.7:sp1 | 6.7:sp2
- documentum_web_publisher6.5:sp7
- documentum_webtop6.7:sp1 | 6.7:sp2 | 6.8
1 vendor · 5 products