CVEvulnerability

CVE-2015-0548

4.0 MEDIUM Published 2015-07-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-20

Description

The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

Affected configurations

• emc documentum d2 4.1 • emc documentum d2 4.2 • emc documentum d2 4.5

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References