Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7gjj-mvhp-qfpx

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request.

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request.

EPSS

Процентиль: 62%
0.00422
Низкий

Связанные уязвимости

nvd
больше 11 лет назад

EMC Documentum Content Server before 6.7 SP2 P16 and 7.x before 7.1 P07, when Oracle Database is used, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and read sensitive database content via a crafted request.

EPSS

Процентиль: 62%
0.00422
Низкий