PT-2017-10372

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.5 through 4.6 Description The issue allows an authenticated low-privileged attacker to potentially exploit it and access information, modify data, or disrupt services by causing execution of arbitrary DQL commands ...

CVE-2016-9873: Improper Neutralization of Special Elements used in a Command

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...