NVD

Id
30921  
Name
CVE-2014-2503  
Description
The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query string.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-05  
Modified Date
2014-06-18  
Seq
2014-2503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162618 30921 CVE-2014-2503 20140604 ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability  View
162619 30921 CVE-2014-2503 http://packetstormsecurity.com/files/126947/EMC-Documentum-Digital-Asset-Manager-Blind-DQL-Injection.html  View
162620 30921 CVE-2014-2503 67868  View
162621 30921 CVE-2014-2503 1030348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13898 JVNDB-2014-002773 EMC Documentum Digital Asset Manager における DQL インジェクション攻撃を実行される脆弱性 EMC Documentum Digital Asset Manager (DAM) のサムネイルプロキシサーバには、Documentum Query Language (DQL) インジェクション攻撃を実行され、オブジェクト照会の制限を回避される脆弱性が存在します。 CVE-2014-2503 69790 CVE-2014-2503 30921 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002773.html 2014-06-04 2014-06-09 View