VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 6, 2014· Updated Jun 17, 2026

CVE-2014-2503

CVE-2014-2503

Description

The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query string.

Affected products

5
  • EMC Corporation/Documentum Digital Asset Manager5 versions
    cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp3:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp3:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp4:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp5:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_digital_asset_manager:6.5:sp6:*:*:*:*:*:*
    • (no CPE)range: >=6.5 SP3, <=6.5 SP6, before P13

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.