What is CVE-2015-0540?

CVE-2015-0540 is a vulnerability in Emc Document Sciences Xpression, classified under SQL Injection. Published 2015-05-25.

Is CVE-2015-0540 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Emc Document Sciences Xpression

CVE-2015-0540

SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.010 (59.0th percentile) — read the EPSS interpretation.

Affected products

Emc Document_sciences_xpression — versions 4.2, 4.5
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2015-0540?: CVE-2015-0540 is a vulnerability in Emc Document Sciences Xpression, classified under SQL Injection. Published 2015-05-25.
Is CVE-2015-0540 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.