CVE-2016-9872

MEDIUM

EMC Documentum D2 4.5 and 4.6 - Reflected Cross-Site Scripting

Title source: llm
STIX 2.1

Description

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to compromise the affected system.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_confirm
http://www.securityfocus.com/archive/1/540060/30/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037733
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/95824

Scores

CVSS v3 6.1
EPSS 0.0028
EPSS Percentile 51.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (3)
emc/documentum_d2 4.5
emc/documentum_d2 4.6
n/a/EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6
Published Feb 03, 2017
Tracked Since Feb 18, 2026