CVEvulnerability
CVE-2014-2520
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.3 MEDIUM — AV:N/AC:M/Au:S/C:C/I:N/A:N
- Weaknesses
- CWE-264
Description
EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request.
Affected configurations
• emc documentum content server (<= 6.7)
• emc documentum content server 6.0
• emc documentum content server 6.5
• emc documentum content server 6.6
• emc documentum content server 6.7
• emc documentum content server 7.0
• emc documentum content server 7.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/60571 secunia.com
- http://www.securityfocus.com/archive/1/533162/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69274 www.securityfocus.com
- http://www.securitytracker.com/id/1030743 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95369 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60571 secunia.com
- http://www.securityfocus.com/archive/1/533162/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/69274 www.securityfocus.com
- http://www.securitytracker.com/id/1030743 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95369 exchange.xforce.ibmcloud.com