9

CVE-2014-2504

EPSS 0.33%
Veröffentlicht 26.05.2014 00:25:31
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security_alert@emc.com
CVE-Watchlists
Login
Unerledigt
Login

EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to bypass intended access restrictions and execute arbitrary Documentum Query Language (DQL) queries by calling (1) a core method or (2) a D2FS web-service method.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Documentum D2 Version3.1 Update-

Emc ≫ Documentum D2 Version3.1 Updatesp1

Emc ≫ Documentum D2 Version4.0

Emc ≫ Documentum D2 Version4.1

Emc ≫ Documentum D2 Version4.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.529

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/current/0130.html

http://secunia.com/advisories/58938

http://www.securitytracker.com/id/1030282

https://nvd.nist.gov/vuln/detail/CVE-2014-2504

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-2504

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-2504

EUVD