CVE-2014-2506
Title: Emc Documentum Content Server
Other
Proof Of Concept
No public PoC currently indexed for CVE-2014-2506.
CWE Category
CWE-264
Published Date
Jun 08, 2014
Modified Date
Jun 17, 2026
Exploit Status
Not Found
Score
8.5
CVSS v2.0
Exploit Probability (EPSS)
3.22%
Vulnerability Summary
CVE-2014-2506: EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions on data access and server actions, via unspecified vectors.
Impacted Vendors
Reference Links
http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html
http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html
http://secunia.com/advisories/58954
http://www.securityfocus.com/archive/1/532596/100/0/threaded
http://www.securityfocus.com/bid/67917
http://www.securitytracker.com/id/1030339
http://archives.neohapsis.com/archives/bugtraq/2014-06/0051.html
http://packetstormsecurity.com/files/126960/EMC-Documentum-Content-Server-Escalation-Injection.html
http://secunia.com/advisories/58954
http://www.securityfocus.com/archive/1/532596/100/0/threaded
http://www.securityfocus.com/bid/67917
http://www.securitytracker.com/id/1030339
CVSS v2.0
Source Entity
[email protected]
Severity
HIGH
8.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:M/Au:S/C:C/I:C/A:C
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2014-2506 Exploits & PoCs (Proof Of Concept)
No public PoCs found in our database for this CVE.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
N/A
Complexity
N/A
Privileges
N/A
Interaction
NONE
CVSS Vector String
AV:N/AC:M/Au:S/C:C/I:C/A:C
Affected Stack
No specific products linked.