CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: emc documentum d2 version 4.5 and emc documentum d2 version 4.6 has a dql injection vulnerability that could potentially be exploited by malicious users to compromise the affected system. an authenticated low-privileged attacker could potentially exploit this vulnerability to access information, modify data or disrupt services by causing execution of arbitrary dql commands on the application.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-02-03
Last Modified Date: 2017-07-25