CVE-2016-9873

CVE-2016-9873 describes a DQL Injection vulnerability in EMC Documentum D2 versions 4.5 and 4.6. An authenticated, low-privileged attacker could exploit this flaw to execute arbitrary DQL commands, potentially leading to information disclosure, data modification, or service disruption. With a CVSS score of 6.3 (Medium), this vulnerability requires network access and low privileges but has low attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat level.