Documentum D2
Vendor:
First CVE: May 26, 2014 · Active for 12 years
12
Total CVEs
More Total CVEs than 90% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 21% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Documentum D2 over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 26, 2014
12 years ago
Most Recent CVE
Feb 3, 2017
3,458 days ago
CVE Severity & Scoring
Documentum D212 CVEs
17%
50%
33%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network4 (33.3%)
Unknown8 (66.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (33.3%)
High0 (0.0%)
Unknown8 (66.7%)
User Interaction
None3 (25.0%)
Unknown8 (66.7%)
Required1 (8.3%)
Privileges Required
Low2 (16.7%)
High0 (0.0%)
None2 (16.7%)
Unknown8 (66.7%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-2504HIGH EMC Documentum D2 3.1 before P20, 3.1 SP1 before P02, 4.0 before P10, 4.1 before P13, and 4.2 before P01 allows remote authenticated users to bypass intended access restrictions an | May 26, 2014 | 9.0 | 27 | NO | NO |
CVE-2016-0888HIGH EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors. | Apr 7, 2016 | 8.8 | 23 | NO | NO |
CVE-2015-0518HIGH The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to o | Feb 14, 2015 | 9.0 | 23 | NO | NO |
CVE-2014-2515HIGH EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2 | Aug 20, 2014 | 8.5 | 22 | NO | NO |
CVE-2016-9873MEDIUM EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected | Feb 3, 2017 | 6.3 | 21 | NO | NO |
CVE-2016-6644MEDIUM EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r_object_id value. | Sep 17, 2016 | 5.3 | 21 | NO | NO |
CVE-2016-9872MEDIUM EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to comprom | Feb 3, 2017 | 6.1 | 17 | NO | NO |
CVE-2015-0547MEDIUM The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query | Jul 4, 2015 | 4.0 | 16 | NO | NO |
CVE-2015-0548MEDIUM The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Quer | Jul 4, 2015 | 4.0 | 14 | NO | NO |
CVE-2015-0517MEDIUM The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows | Feb 14, 2015 | 4.0 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Documentum D2
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.6 | 2 | 6.2 | 1.5% | 0 | 0 |
| 4.5 | 4 | 5.1 | 1.5% | 0 | 0 |
| 4.2 | 6 | 6.4 | 2.2% | 0 | 0 |
| 4.1 | 6 | 6.4 | 2.2% | 0 | 0 |
| 4.0 | 4 | 7.6 | 2.6% | 0 | 0 |
| 3.1 | 4 | 7.6 | 2.6% | 0 | 0 |