VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 4, 2015· Updated Jun 17, 2026

CVE-2015-0548

CVE-2015-0548

Description

The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • EMC Corporation/Documentum D24 versions
    cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_d2:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_d2:4.5:*:*:*:*:*:*:*
    • (no CPE)range: 4.1, 4.2 <4.2 P16, 4.5 <P03

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.