Medium severity6.3NVD Advisory· Published Feb 3, 2017· Updated Jun 17, 2026
CVE-2016-9873
CVE-2016-9873
Description
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information, modify data or disrupt services by causing execution of arbitrary DQL commands on the application.
Affected products
3cpe:2.3:a:emc:documentum_d2:4.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:emc:documentum_d2:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_d2:4.6:*:*:*:*:*:*:*
- (no CPE)range: 4.5, 4.6
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/archive/1/540060/30/0/threadednvdThird Party Advisory
- www.securityfocus.com/bid/95828nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1037733nvd
News mentions
0No linked articles in our index yet.