EMC Documentum WebTop based client products contain multiple cross-site scripting vulnerabilities that could potentially be exploited by attackers to inject arbitrary HTML code or scripts, which may get executed in the context of an authenticated user. EMC Documentum WebTop based client products allow any type of user supplied file to be uploaded to the backend Content Server, which may allow attackers to upload malicious files.
278877c5df980f66d9fd9c4f4870f5f1cbb93f6f9c6cb010ec9ed4eefde7ed13