CVE-2017-2766

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-03 · updated 2026-06-17
Weakness: CWE-640

Description

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise the affected system.

Affected products

EMC Documentum eRoom EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom ve: 7.4.4, 7.4.4-sp1, 7.4.5, 7.4.5-p01, 7.4.5-p02, 7.4.5-p03 (+1)

References

http://www.securityfocus.com/archive/1/540077/30/0/threaded
http://www.securityfocus.com/bid/95893
http://www.securityfocus.com/archive/1/540077/30/0/threaded
http://www.securityfocus.com/bid/95893

Get alerted when CVE-2017-2766 or the next vulnerability affects your stack