CVE-2016-8213: emc documentum_administrator Cross-site Scripting

Vulnerability summary

CVE-2016-8213 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in emc documentum_administrator. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 60.9% of scored vulnerabilities.

Timeline

1. 23-01-2017
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.

• CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.