VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jul 4, 2015· Updated May 6, 2026

CVE-2015-0548

CVE-2015-0548

Description

The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

Affected products

3
  • EMC Corporation/Documentum D23 versions
    cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_d2:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:emc:documentum_d2:4.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.