CVE-2011-2739

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-11-09 · updated 2026-06-16
Weakness: CWE-264

Description

The file-blocking feature in EMC Documentum eRoom 7.3.x and 7.4.x before 7.4.3.g does not properly restrict the uploading and opening of files with dangerous file types, which allows remote authenticated users to execute arbitrary code via an uploaded file.

Affected products

EMC Documentum eRoom EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom ve: 7.3.0, 7.4.1, 7.4.2, 7.4.3

References

http://securityreason.com/securityalert/8528
http://www.securityfocus.com/archive/1/520372
http://securityreason.com/securityalert/8528
http://www.securityfocus.com/archive/1/520372

Get alerted when CVE-2011-2739 or the next vulnerability affects your stack