| Package | Affected versions | Patched versions |
|---|---|---|
| documentum digital asset manager | = 6.5 |
The thumbnail proxy server in EMC Documentum Digital Asset Manager (DAM) 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language (DQL) injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free