Vulnerability Description
The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query string.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc | Documentum Digital Asset Manager | 6.5 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0037.html
- http://packetstormsecurity.com/files/126947/EMC-Documentum-Digital-Asset-Manager
- http://www.securityfocus.com/bid/67868
- http://www.securitytracker.com/id/1030348
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0037.html
- http://packetstormsecurity.com/files/126947/EMC-Documentum-Digital-Asset-Manager
- http://www.securityfocus.com/bid/67868
- http://www.securitytracker.com/id/1030348
FAQ
What is CVE-2014-2503?
CVE-2014-2503 is a vulnerability with a CVSS score of 7.5 (HIGH). The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection ...
How severe is CVE-2014-2503?
CVE-2014-2503 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2503?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Documentum Digital Asset Manager.