Medium severity5.4NVD Advisory· Published Feb 12, 2016· Updated May 6, 2026
CVE-2016-0882
CVE-2016-0882
Description
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected products
2cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_xcp:2.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- seclists.org/bugtraq/2016/Feb/66nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1034993nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.