CVE Feed

    Dashboard / CVE / CVE-2014-2520

    CVE-2014-2520

    EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request.

    Published:Aug 20, 2014
    Last Modified:Apr 12, 2025
    EPS:Aug 20, 2014
    EPSS Score:0.00422
    CVSS Score:6.3

    Affected Products

    Vendor
    Emc
    Product
    Documentum Content Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2015-4544 (CVSS 9) — EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for…
    CVE-2015-4535 (CVSS 7.5) — Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19…
    CVE-2015-4534 (CVSS 9) — Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19…
    CVE-2015-4536 (CVSS 3.5) — EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configur…
    CVE-2015-4533 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2015-4532 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2015-4531 (CVSS 9) — EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 be…
    CVE-2014-4626 (CVSS 9) — EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allow…
    CVE-2014-4629 (CVSS 9) — EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated user…
    CVE-2014-4622 (CVSS 7.1) — EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High