EMC Documentum xCP 2.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum Xcp (448c1c92-e1a7-552e-9d1b-1983126dfdcb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0886 vulnerable 2026-06-08 05:07:16.455239 Details available
EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call.
Published: 2016-03-09T23:00:00.000Z
Updated: 2024-08-05T22:38:39.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0882 vulnerable 2026-06-08 05:07:16.448397 Details available
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-02-12T01:00:00.000Z
Updated: 2024-08-05T22:30:05.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0881 vulnerable 2026-06-08 05:07:16.447388 Details available
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.
Published: 2016-02-12T01:00:00.000Z
Updated: 2024-08-05T22:30:05.175Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.