CVE-2016-0881: Emc Documentum Xcp

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.

Affected products

• Emc Documentum Xcp: version 2.1 only; version 2.2 only

Published 2016-02-12. Last modified 2026-06-17.