CVE-2014-2507

high

Description

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to unspecified methods.

References

http://www.securitytracker.com/id/1030339

http://www.securityfocus.com/bid/67916

http://www.securityfocus.com/archive/1/532596/100/0/threaded

http://secunia.com/advisories/58954

http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html

http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html

Details

Source: Mitre, NVD

Published: 2014-06-08

Updated: 2025-04-12

Risk Information

CVSS v2

Base Score: 8.5

Vector: CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H