CVE-2016-9873

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information, modify data or disrupt services by causing execution of arbitrary DQL commands on the application.

Metrics

CVSS 3.0 6.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6	EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6

References

http://www.securityfocus.com/archive/1/540060/30/0/threadedThird Party Advisory
http://www.securityfocus.com/bid/95828Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037733
http://www.securityfocus.com/archive/1/540060/30/0/threadedThird Party Advisory
http://www.securityfocus.com/bid/95828Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037733

Timeline

Published: Feb 3, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-98779.8An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1 CVE-2016-98787.5An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the Resourc CVE-2016-98797.5An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does not consi CVE-2016-98809.8The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authenticatio CVE-2016-98827.5An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foun CVE-2016-98859.8An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh (Geode Shell) e CVE-2016-98885.5An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited CVE-2016-98896.1Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before CVE-2016-98915.4Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated use CVE-2016-98925.9The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not pro CVE-2016-98939.8Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enoug CVE-2016-98947.5A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a