CVE-2014-2508

EMC Documentum Content Server before 6.7 SP1 P28, 6.7 SP2 before P14, 7.0 before P15, and 7.1 before P05 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on database actions via vectors involving DQL hints...

CVE-2014-2508

CVE-2014-2508 affects EMC Documentum Content Server versions 6.7 SP1 P28, 6.7 SP2 P14, 7.0 P15, and 7.1 P05 and earlier, where an authenticated user can exploit DQL hints to perform DQL injection and bypass restrictions on database actions. The root cause is described as improper handling/validat...

CVE-2014-2503

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

Design/Logic Flaw

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

CVE-2014-2503

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

CVE-2014-2503

Summary (CVE-2014-2503) : EMC Documentum Digital Asset Manager (DAM) 6.5 SP3/SP4/SP5/SP6 before P13 is affected by a Blind DQL injection via the thumbnail proxy server, allowing remote attackers to bypass query restrictions. The issue arises from how a crafted URL query parameter is processed, en...