VDB

GCVE-110-CERTCC-2013-346982

GCVE-110-CERTCC-2013-346982
Advisory PublishedCVSS 6.8/10
Vulnetix · Advisory published November 20, 2013
EMC Document Sciences xPression 4.2 Patch 16 and possibly earlier versions contain path traversal, SQL injection, cross-site scripting (XSS), open redirect, and cross-site request forgery (CSRF) vulnerabilities.
Download JSON Open in Console

Risk Scores

CVSS 2.0
6.8/10
Medium · AV:N/AC:L/Au:S/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score5.3remediation_levelOFreport_confidenceCenvironmental_score1.33589903832target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2013-6177CVE-2013-6173CVE-2013-6174CVE-2013-6175CVE-2013-6176

Transitive aliases

GHSA-xj4c-3gx9-2cc7GSD-2013-6174GHSA-8rp4-6hc9-cphqGHSA-fr5x-3698-x7mxGHSA-jr66-9578-359vGSD-2013-6177GHSA-5qh4-f2hp-wrvjGSD-2013-6175GSD-2013-6176GSD-2013-6173

References

EMC Document Sciences xPression contains multiple vulnerabilities
url
EMC Document Sciences xPression contains multiple vulnerabilities
url
EMC Document Sciences xPression contains multiple vulnerabilities
advisory

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›