CVE-2016-0881

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-02-12 · updated 2026-06-17
Weakness: CWE-74

Description

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.

Affected products

EMC Documentum Xcp: 2.1, 2.2

References

http://seclists.org/bugtraq/2016/Feb/66
http://www.securitytracker.com/id/1034993
http://seclists.org/bugtraq/2016/Feb/66
http://www.securitytracker.com/id/1034993

Get alerted when CVE-2016-0881 or the next vulnerability affects your stack