Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_d2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEmc (f882007a-26e9-5b42-9f2e-94a4747c4377)
ProductDocumentum D2 (e3a9a6a1-7d79-55f8-b180-add6fb3e2089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32264 vulnerable 2026-06-08 06:04:45.280836 Details available
MEDIUM (5.8)
CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer.
Published: 2024-03-08T20:48:07.941Z
Updated: 2024-08-12T20:05:05.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0888 vulnerable 2026-06-08 05:07:16.461356 Details available
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors.
Published: 2016-04-07T10:00:00.000Z
Updated: 2024-08-05T22:38:40.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4537 vulnerable 2026-06-08 05:06:40.138100 Details available
Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote authenticated users to decrypt admin tickets by locating this passphrase in a decompiled D2 JAR archive.
Published: 2015-08-22T18:00:00.000Z
Updated: 2024-08-06T06:18:11.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0549 vulnerable 2026-06-08 05:06:21.736093 Details available
Cross-site scripting (XSS) vulnerability in EMC Documentum D2 before 4.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-06-28T19:00:00.000Z
Updated: 2024-08-06T04:10:11.037Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.