Medium severity5.4NVD Advisory· Published Feb 12, 2016· Updated Jun 17, 2026
CVE-2016-0882
CVE-2016-0882
Description
EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:emc:documentum_xcp:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_xcp:2.2:*:*:*:*:*:*:*
- (no CPE)range: <2.1 patch 23 and <2.2 patch 11
Patches
Vulnerability mechanics
References
2- seclists.org/bugtraq/2016/Feb/66nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1034993nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.