GCVE - cpe:2.3:a:emc:documentum_d2:4.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_d2:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Documentum D2 (`e3a9a6a1-7d79-55f8-b180-add6fb3e2089`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9873`	vulnerable	2026-06-08 05:08:24.812030	Details available EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information, modify data or disrupt services by causing execution of arbitrary DQL commands on the application. Published: 2017-02-03T07:24:00.000Z Updated: 2024-08-06T03:07:30.174Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95828 http://www.securityfocus.com/archive/1/540060/30/0/threaded http://www.securitytracker.com/id/1037733	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9872`	vulnerable	2026-06-08 05:08:24.810782	Details available EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to compromise the affected system. Published: 2017-02-03T07:24:00.000Z Updated: 2024-08-06T03:07:30.181Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/540060/30/0/threaded http://www.securitytracker.com/id/1037733 http://www.securityfocus.com/bid/95824	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0548`	vulnerable	2026-06-08 05:06:21.734546	Details available The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. Published: 2015-07-04T10:00:00.000Z Updated: 2024-08-06T04:10:11.059Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032769 http://seclists.org/bugtraq/2015/Jul/10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0547`	vulnerable	2026-06-08 05:06:21.734127	Details available The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. Published: 2015-07-04T10:00:00.000Z Updated: 2024-08-06T04:10:10.961Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032769 http://seclists.org/bugtraq/2015/Jul/10	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.