8 matches found
CVE-2016-0886
EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...
CVE-2016-0886: Exposure of Sensitive Information to an Unauthorized Actor
EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...
PT-2016-4443
Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 before patch 24 EMC Documentum xCP versions 2.2 before patch 12 Description The issue allows remote authenticated users to obtain sensitive user-account metadata. This is achieved via a "members/xcp member" API...
CVE-2016-0882
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2016-0881: Improper Neutralization of Special Elements in Output Used by a Downstream Component
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...
PT-2016-4440
Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 before patch 23 EMC Documentum xCP versions 2.2 before patch 11 Description The issue allows remote authenticated users to conduct Documentum Query Language DQL injection attacks. This is achieved by appending a...
PT-2016-4441
Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 through 2.1 before patch 23 EMC Documentum xCP versions 2.2 through 2.2 before patch 11 Description The issue allows remote authenticated users to read arbitrary files via a POST request containing an XML extern...
CVE-2016-0882: Undefined Security Weakness
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...