CVE-2017-5585
HIGHOpenText Documentum Content Server 7.3 - Authenticated SQL Injection via DQL Hints
Title source: llmDescription
OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2520.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96224
Scores
CVSS v3
8.8
EPSS
0.0201
EPSS Percentile
78.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-74
Status
published
Products (1)
opentext/documentum_content_server
7.3
Published
Feb 22, 2017
Tracked Since
Feb 18, 2026