CVE-2013-6175: Multiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch...

Security readout for executives and security teams

This CVE affects legacy EMC Document Sciences xPression management interfaces. A remote attacker could inject web script or HTML into xAdmin or xDashboard forms, potentially affecting users who view the resulting pages. Business urgency depends on whether these older xPression versions remain deployed and reachable. Exposure is most likely in organizations still running legacy xPression Documentum Edition, Enterprise Edition Publish Engine, or Enterprise Edition Compuset Engine. Risk increases if xAdmin or xDashboard is reachable from broad internal networks, partners, or the Internet. Prioritize remediation if xPression is still used for business document generation or publishing, especially where administrative interfaces are broadly reachable. If the product is retired or patched, keep evidence for audit closure. Mitigation focus: Inventory xPression deployments and identify version and patch level.; Apply Patch 47 or later for 4.1 SP1 installations.; Apply Patch 26 or later for 4.2 installations..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.