CVE-2013-0938: Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7...

Security readout for executives and security teams

This CVE describes a cross-site scripting flaw in several EMC Documentum web products before 6.7 SP2. An attacker could inject script or HTML through unspecified vectors, potentially affecting users who access a vulnerable Documentum interface. The public record does not provide CVSS, exact attack paths, or evidence of active exploitation. Exposure is likely limited to organizations still running affected EMC Documentum web components before 6.7 SP2, especially if user-facing portals are reachable by broad internal or external audiences. Evidence is incomplete for exact vulnerable configurations. Treat this as a targeted cleanup item unless affected Documentum portals are internet-facing or widely used internally. Upgrade planning is justified because Documentum often handles sensitive business records, but public evidence does not support emergency handling. Mitigation focus: Inventory Documentum Webtop, WDK, Taskspace, and Records Manager versions.; Upgrade affected components to 6.7 SP2 or later vendor-supported releases.; Review EMC advisory ESA-2013-021 for exact vendor remediation guidance..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.