CVE-2016-0881 | BDVDB-2026-74394 Detail

Description#

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1034993
http://seclists.org/bugtraq/2016/Feb/66

Exploit#

No public exploit known

History#

Version 12016-02-12Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.