CVE-2016-8213 - Vulnerability Details - OpenCVE

EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Emc	Documentum Administrator Documentum Capital Projects Documentum Taskspace Documentum Webtop

Configuration 1 [-]

OR	cpe:2.3:a:emc:documentum_administrator:7.0:::::::*
	cpe:2.3:a:emc:documentum_administrator:7.1:::::::*
	cpe:2.3:a:emc:documentum_administrator:7.2:::::::*
	cpe:2.3:a:emc:documentum_capital_projects:1.9:::::::*
	cpe:2.3:a:emc:documentum_capital_projects:1.10:::::::*
	cpe:2.3:a:emc:documentum_taskspace:6.7:sp3::::::
	cpe:2.3:a:emc:documentum_webtop:6.8:::::::*
	cpe:2.3:a:emc:documentum_webtop:6.8.1:::::::*

No data.

References

Link	Providers
http://www.securityfocus.com/archive/1/540019/30/0/threaded
http://www.securityfocus.com/bid/95625
http://www.securitytracker.com/id/1037626

History

No history.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2017-01-23T06:49:00

Updated: 2024-08-06T02:13:21.796Z

Reserved: 2016-09-13T00:00:00

Link: CVE-2016-8213

Vulnrichment

No data.

NVD

Status : Modified

Published: 2017-01-23T07:59:00.440

Modified: 2024-11-21T02:58:59.943

Link: CVE-2016-8213

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "EMC Documentum Webtop and Clients", "vendor": "n/a", "versions": [{"status": "affected", "version": "EMC Documentum Webtop and Clients"}]}], "datePublic": "2017-01-22T00:00:00", "descriptions": [{"lang": "en", "value": "EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system."}], "problemTypes": [{"descriptions": [{"description": "Stored Cross-Site Scripting", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-02-10T21:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.securityfocus.com/archive/1/540019/30/0/threaded"}, {"name": "95625", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/95625"}, {"name": "1037626", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1037626"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2016-8213", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EMC Documentum Webtop and Clients", "version": {"version_data": [{"version_value": "EMC Documentum Webtop and Clients"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Stored Cross-Site Scripting"}]}]}, "references": {"reference_data": [{"name": "http://www.securityfocus.com/archive/1/540019/30/0/threaded", "refsource": "CONFIRM", "url": "http://www.securityfocus.com/archive/1/540019/30/0/threaded"}, {"name": "95625", "refsource": "BID", "url": "http://www.securityfocus.com/bid/95625"}, {"name": "1037626", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1037626"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:13:21.796Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/540019/30/0/threaded"}, {"name": "95625", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/95625"}, {"name": "1037626", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1037626"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2016-8213", "datePublished": "2017-01-23T06:49:00", "dateReserved": "2016-09-13T00:00:00", "dateUpdated": "2024-08-06T02:13:21.796Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:emc:documentum_administrator:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "34D56991-BEA6-4160-9E5C-4B7034DB1FD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_administrator:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "E97C5C13-EBDB-4906-8875-1D8D70C68206", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_administrator:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "A5E065EF-D76B-40D3-BEC1-D846654C6590", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_capital_projects:1.9:*:*:*:*:*:*:*", "matchCriteriaId": "3B0AED45-805C-4AE2-A12C-11F8710A7F06", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_capital_projects:1.10:*:*:*:*:*:*:*", "matchCriteriaId": "2105B120-08F1-4493-8EDD-6DD8492A6D0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_taskspace:6.7:sp3:*:*:*:*:*:*", "matchCriteriaId": "15EF2D73-E10A-469A-A8F4-9F4A2AE07C54", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_webtop:6.8:*:*:*:*:*:*:*", "matchCriteriaId": "261FA013-FE18-4B09-A52B-909E2BB06891", "vulnerable": true}, {"criteria": "cpe:2.3:a:emc:documentum_webtop:6.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "D3A7E70A-8E7F-44F7-B6D2-4AE4B61D6D1E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system."}, {"lang": "es", "value": "EMC Documentum WebTop Version 6.8 antes de P18 y Version 6.8.1 antes de P06 y EMC Documentum TaskSpace versi\u00f3n 6.7SP3 antes de P02 y EMC Documentum Capital Projects Version 1.9 antes de P30 y versi\u00f3n 1.10 antes de P17 y EMC Documentum Administrator versi\u00f3n 7.0, versi\u00f3n 7.1 y versi\u00f3n 7.2 antes de P18 contiene una vulnerabilidad Stored Cross-Site Scripting que podr\u00eda ser potencialmente explotable por usuarios maliciosos para comprometer el sistema afectado."}], "id": "CVE-2016-8213", "lastModified": "2024-11-21T02:58:59.943", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-01-23T07:59:00.440", "references": [{"source": "security_alert@emc.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/540019/30/0/threaded"}, {"source": "security_alert@emc.com", "url": "http://www.securityfocus.com/bid/95625"}, {"source": "security_alert@emc.com", "url": "http://www.securitytracker.com/id/1037626"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/540019/30/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/95625"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1037626"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}