VULNERABILITY INTELLIGENCE
CVE-2014-2503
CVSS score7.5 HIGH
EPSS probability2.79%
CISA KEVNot currently listed
Published2014-06-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query string.
Weakness classification
- CWE-20: Improper Input Validation