CVE-2016-9873

CVE-2016-9873 concerns EMC Documentum D2 4.5 and 4.6, where a DQL (Document Query Language) injection allows an authenticated, low-privilege attacker to execute arbitrary DQL commands, potentially exposing/modifying data or disrupting services. The vulnerability is documented across multiple sour...

EMC Documentum D2 4.5.x and 4.6.x < 4.7 Multiple Vulnerabilities (ESA-2016-167)

The remote host is running a version of EMC Documentum D2 that is 4.5.x or 4.6.x prior to 4.7. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can...