Chain
CVE-2014-2515 family: incomplete fixes (2014–2015)
3 CVEs over 3 generations, 20 Aug 2014 to 4 Sep 2015.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2014-251520 Aug 2014 First in the chain
- CVE-2014-462617 Dec 2014 incomplete fix for CVE-2014-2515
- CVE-2015-45444 Sep 2015 incomplete fix for CVE-2014-4626
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2014-2515 | 20 Aug 2014 | EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not… | First in chain | 16.9 |
| CVE-2014-4626 | 17 Dec 2014 | EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote… | CVE-2014-2515 · incomplete fix · High | 18.1 |
| CVE-2015-4544 | 4 Sep 2015 | EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job… | CVE-2014-4626 · incomplete fix · High | 22.1 |