Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

emc documentum d2 4.0 vulnerabilities and exploits

(subscribe to this query)
356
VMScore
CVE-2015-0517
The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 prior to 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.
Emc Documentum D2 3.1Emc Documentum D2 4.2Emc Documentum D2 4.0Emc Documentum D2 4.1
801
VMScore
CVE-2015-0518
The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 prior to 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.
Emc Documentum D2 3.1Emc Documentum D2 4.0Emc Documentum D2 4.1Emc Documentum D2 4.2
801
VMScore
CVE-2014-2504
EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to bypass intended access restrictions and execute arbitrary Documentum Query Language (DQL) queries by calling (1) a core method or (2) a D2...
Emc Documentum D2 3.1Emc Documentum D2 4.2Emc Documentum D2 4.1Emc Documentum D2 4.0
756
VMScore
CVE-2014-2515
EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a s...
Emc Documentum D2 3.1Emc Documentum D2 4.1Emc Documentum D2 4.2Emc Documentum D2 4.0
755
VMScore
CVE-2017-5586
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote malicious users to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.
Opentext Documentum D2 4.1Opentext Documentum D2 4.4Opentext Documentum D2 4.3Opentext Documentum D2 4.0Opentext Documentum D2 4.2Opentext Documentum D2 4.5Opentext Documentum D2 4.6
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook