CVE-2014-2510: The JAXB XML parser in EMC Documentum Foundation Services (DFS) 6.6 before P39, 6.7 SP1 before P28, and 6.7 SP2 before P

CVE-2014-2510 is a vulnerability in EMC Documentum Foundation Services (DFS) versions 6.6, 6.7 SP1, and 6.7 SP2 that allows authenticated users to read files they shouldn't have access to through an XXE (XML External Entity, a flaw where specially crafted XML input tricks a parser into accessing external files) attack. The vulnerability affects components like My Documentum for Desktop, My Documentum for Microsoft Outlook, and CenterStage.