225 matches found
PT-2016-4443
Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 before patch 24 EMC Documentum xCP versions 2.2 before patch 12 Description The issue allows remote authenticated users to obtain sensitive user-account metadata. This is achieved via a "members/xcp member" API...
CVE-2016-0882
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2016-0882
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2016-0881
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...
Design/Logic Flaw
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...
CVE-2016-0881
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...
Xxe
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2016-0882
EMC Documentum xCP is affected: versions 2.1 before patch 23 and 2.2 before patch 11 are vulnerable to a XML External Entity (XXE) issue. The vulnerability enables remote authenticated users to read arbitrary files by sending a POST request containing an XML external entity declaration combined w...
CVE-2016-0882
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2016-0881
EMC Documentum xCP is affected: versions 2.1 before patch 23 and 2.2 before patch 11 expose a DQL injection via REST requests, allowing remote authenticated attackers to obtain sensitive repository information. The root cause is improper handling of XCP REST requests, enabling execution of SQL-li...
CVE-2016-0881
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...
PT-2016-4441
Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 through 2.1 before patch 23 EMC Documentum xCP versions 2.2 through 2.2 before patch 11 Description The issue allows remote authenticated users to read arbitrary files via a POST request containing an XML extern...
PT-2016-4440
Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 before patch 23 EMC Documentum xCP versions 2.2 before patch 11 Description The issue allows remote authenticated users to conduct Documentum Query Language DQL injection attacks. This is achieved by appending a...
CVE-2016-0882: Undefined Security Weakness
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2016-0881: Improper Neutralization of Special Elements in Output Used by a Downstream Component
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...
CVE-2015-0527
EMC Documentum xCelerated Management System (xMS) 1.1 prior to P14 contains a sensitive information disclosure vulnerability where Windows Service credentials are stored in plaintext in batch files during provisioning of Documentum Platform or xCP. Local users can read these files to obtain crede...
Design/Logic Flaw
Unspecified vulnerability in the SPARC Enterprise M Series Servers component in Oracle and Sun Systems Products Suite XCP 1114 and earlier allows remote attackers to affect availability via vectors related to XSCF Control Package XCP...
CVE-2013-3773
Unspecified vulnerability in the SPARC Enterprise M Series Servers component in Oracle and Sun Systems Products Suite XCP 1114 and earlier allows remote attackers to affect availability via vectors related to XSCF Control Package XCP...
CVE-2013-3773
Technical details about CVE-2013-3773 are not publicly available in the provided documents. Monitor for updates.
PT-2013-4613
Name of the Vulnerable Software and Affected Versions Oracle and Sun Systems Products Suite XCP versions prior to 1114 Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to XSCF Control Package XCP. Recommendations For version...