CVEvulnerability

CVE-2016-9873

6.3 MEDIUM Published 2017-02-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-02-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-77

Description

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information, modify data or disrupt services by causing execution of arbitrary DQL commands on the application.

Affected configurations

• emc documentum d2 4.5 • emc documentum d2 4.6

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References