CVE-2015-4524

Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.

• CWE-434

• http://seclists.org/bugtraq/2015/Jul/9Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1032770Third Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2015/Jul/9Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1032770Third Party Advisory, VDB Entry

Published

Jul 4, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4518The Reader View implementation in Mozilla Firefox before 42.…
• CVE-2015-4519Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3…
• CVE-2015-4520Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3…
• CVE-2015-4521The ConvertDialogOptions function in Mozilla Firefox before …
• CVE-2015-4522The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefo…
• CVE-2015-4523Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and …
• CVE-2015-4525The log-gather implementation in the web administration inte…
• CVE-2015-4526EMC RecoverPoint for Virtual Machines (VMs) 4.2 allows local…
• CVE-2015-4527Directory traversal vulnerability in EMC Avamar Server 7.x b…
• CVE-2015-4528Cross-site scripting (XSS) vulnerability in EMC Documentum C…
• CVE-2015-4529Open redirect vulnerability in EMC Documentum WebTop before …
• CVE-2015-4530Cross-site request forgery (CSRF) vulnerability in EMC Docum…