CVE-2017-5585

OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config…

published February 22, 2017

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2520.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02012 · 80.6th percentile
Published
2017-02-22T16:00Z
EPSS history
Timeline
  • 22 FEB 16:00Z
    OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config…
    cvelistv5