VULNERABILITY INTELLIGENCE

CVE-2016-0886

CVSS score4.3 MEDIUM

EPSS probability1.76%

CISA KEVNot currently listed

Published2016-03-09

Last modified2026-06-17

Description

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcp_member API call.