CVEvulnerability

CVE-2014-2508

7.5 HIGH Published 2014-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:M/Au:S/C:C/I:P/A:P
Weaknesses
CWE-20

Description

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on database actions via vectors involving DQL hints.

Affected configurations

• emc documentum content server (<= 6.7) • emc documentum content server 6.0 • emc documentum content server 6.5 • emc documentum content server 6.6 • emc documentum content server 6.7 • emc documentum content server 7.0 • emc documentum content server 7.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

Referenced by CWE · observed example (1)

  • CWE-943 Improper Neutralization of Special Elements in Data Query Logic weakness

References