CVE-2013-6177

EMC Document Sciences xPression 4.1 SP1-4.5 - Authenticated Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allows remote authenticated users to read arbitrary files by leveraging xDashboard access.

References (4)

Core 4
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-11/0095.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029384
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/346982

Scores

EPSS 0.0034
EPSS Percentile 57.0%

Details

CWE
CWE-22
Status published
Products (3)
emc/document_sciences_xpression 4.1 sp1 (3 CPE variants)
emc/document_sciences_xpression 4.2 (3 CPE variants)
emc/document_sciences_xpression 4.5 (3 CPE variants)
Published Nov 21, 2013
Tracked Since Feb 18, 2026