What’s Vulnerable › Vulnerabilities

CVE-2014-2518

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-08-20 · updated 2026-06-17
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.

Affected products

• EMC Digital Assets Manager: 6.5, 6.5-sp5, 6.5-sp6
• EMC Documentum Administrator: 6.7, 6.7-sp1, 6.7-sp2, 7.0, 7.1
• EMC Documentum Capital Projects: 1.8, 1.9
• EMC Documentum Records Manager: 6.7, 6.7-sp1, 6.7-sp2
• EMC Documentum Wdk: 6.7-sp1, 6.7-sp2
• EMC Documentum Webtop: 6.7, 6.7-sp1, 6.7-sp2
• EMC Engineering Plant Facilities Management Solution For Documentum: 1.7-sp1
• EMC Task Space: 6.7-sp1, 6.7-sp2
• EMC Web Publishers: 6.5-sp6, 6.5-sp7

References

• http://secunia.com/advisories/60563
• http://www.securityfocus.com/archive/1/533159/30/0/threaded
• http://www.securityfocus.com/bid/69277
• http://www.securitytracker.com/id/1030742
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95365
• http://secunia.com/advisories/60563
• http://www.securityfocus.com/archive/1/533159/30/0/threaded
• http://www.securityfocus.com/bid/69277
• http://www.securitytracker.com/id/1030742
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95365

Get alerted when CVE-2014-2518 or the next vulnerability affects your stack