GCVE - cpe:2.3:a:emc:documentum_d2:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emc:documentum_d2:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Emc (`f882007a-26e9-5b42-9f2e-94a4747c4377`)
Product	Documentum D2 (`e3a9a6a1-7d79-55f8-b180-add6fb3e2089`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-0518`	vulnerable	2026-06-08 05:06:21.668096	Details available The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions. Published: 2015-02-14T15:00:00.000Z Updated: 2024-08-06T04:10:11.051Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1031693 https://exchange.xforce.ibmcloud.com/vulnerabilities/100875 http://www.securityfocus.com/bid/72502 http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0517`	vulnerable	2026-06-08 05:06:21.666621	Details available The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file. Published: 2015-02-14T15:00:00.000Z Updated: 2024-08-06T04:10:11.070Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/100874 http://www.securitytracker.com/id/1031693 http://www.securityfocus.com/bid/72501 http://archives.neohapsis.com/archives/bugtraq/2015-02/0031.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2515`	vulnerable	2026-06-08 05:05:28.982391	Details available EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket. Published: 2014-08-20T10:00:00.000Z Updated: 2024-08-06T10:14:26.603Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/69275 https://exchange.xforce.ibmcloud.com/vulnerabilities/95367 http://secunia.com/advisories/60565 http://www.securitytracker.com/id/1030740 http://www.securityfocus.com/archive/1/533161/30/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2504`	vulnerable	2026-06-08 05:05:28.941858	Details available EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to bypass intended access restrictions and execute arbitrary Documentum Query Language (DQL) queries by calling (1) a core method or (2) a D2FS web-service method. Published: 2014-05-23T22:00:00.000Z Updated: 2024-08-06T10:14:26.606Z Open on db.gcve.eu Reference links http://secunia.com/advisories/58938 http://www.securitytracker.com/id/1030282 http://archives.neohapsis.com/archives/bugtraq/current/0130.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.