CoreCVE
Back

MEDIUM

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request

Published Aug 20, 2014

Description

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner dell
Published Aug 20, 2014
Updated Aug 6, 2024
Reserved Mar 14, 2014
Link CVE-2014-2520

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2014-2520

Red Hat

No data

ENISA EUVD

Assigner dell
Published Aug 20, 2014
Updated Aug 6, 2024
Link EUVD-2014-2556

GitHub

No data