ESA-2016-143: EMC Documentum Webtop and Clients Stored Cross-Site Scripting Vulnerability

--_002_1BF8853173D9704A93EF882F85952A891CF336MX304CL04corpemcc_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable



--_002_1BF8853173D9704A93EF882F85952A891CF336MX304CL04corpemcc_
Content-Type: text/plain; name="ESA-2016-143.txt"
Content-Description: ESA-2016-143.txt
Content-Disposition: attachment; filename="ESA-2016-143.txt"; size=4079;
	creation-date="Tue, 03 Jan 2017 15:36:13 GMT";
	modification-date="Wed, 11 Jan 2017 17:59:19 GMT"
Content-Transfer-Encoding: base64
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--_002_1BF8853173D9704A93EF882F85952A891CF336MX304CL04corpemcc_--