CVE-2013-6174

EMC Document Sciences xPression - Open Redirect via xAdmin Parameters

Title source: llm
STIX 2.1

Description

Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters.

References (5)

Core 5
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029384
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/63810
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/346982

Scores

EPSS 0.0073
EPSS Percentile 73.0%

Details

CWE
CWE-20
Status published
Products (3)
emc/document_sciences_xpression 4.1 sp1 (3 CPE variants)
emc/document_sciences_xpression 4.2 (3 CPE variants)
emc/document_sciences_xpression 4.5 (3 CPE variants)
Published Nov 21, 2013
Tracked Since Feb 18, 2026