EMC Documentum D2 4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Emc (f882007a-26e9-5b42-9f2e-94a4747c4377) |
|---|---|
| Product | Documentum D2 (e3a9a6a1-7d79-55f8-b180-add6fb3e2089) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0548 |
vulnerable | 2026-06-08 05:06:21.734503 |
Details available
The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.
Published: 2015-07-04T10:00:00.000Z
Updated: 2024-08-06T04:10:11.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0547 |
vulnerable | 2026-06-08 05:06:21.732691 |
Details available
The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.
Published: 2015-07-04T10:00:00.000Z
Updated: 2024-08-06T04:10:10.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0518 |
vulnerable | 2026-06-08 05:06:21.668113 |
Details available
The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.
Published: 2015-02-14T15:00:00.000Z
Updated: 2024-08-06T04:10:11.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0517 |
vulnerable | 2026-06-08 05:06:21.667115 |
Details available
The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.
Published: 2015-02-14T15:00:00.000Z
Updated: 2024-08-06T04:10:11.070Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2515 |
vulnerable | 2026-06-08 05:05:28.982408 |
Details available
EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket.
Published: 2014-08-20T10:00:00.000Z
Updated: 2024-08-06T10:14:26.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2504 |
vulnerable | 2026-06-08 05:05:28.942338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.