CVE-2016-0882

2016-02-1201:00:00

dell

www.cve.org

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

40.2%

JSON

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

seclists.org/bugtraq/2016/Feb/66

www.securitytracker.com/id/1034993