Read the docs

OpenText

Records253All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical36CVSS 9.0–10.0
CVSS high123CVSS 7.0–8.9

Exploited now

OpenText records in CISA KEV

No OpenText vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Brava! Desktop 35 records MEDIUM Documentum Content Server 8 records HIGH Vertica 8 records MEDIUM Document Sciences Xpression 7 records MEDIUM Opentext Extended Ecm 7 records HIGH Flipper 6 records LOW Appbuilder 5 records MEDIUM Documentum Webtop 5 records MEDIUM

Records

7 records in Document Sciences Xpression · all components

TI-2017-10820 CVE-2017-14759 · GHSA-p2jv-394x-276f

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority MEDIUM 45

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01311 Published 2017-10-02 No fix listed CWE-611
TI-2017-10819 CVE-2017-14758 · GHSA-94mv-wvq3-pm2g

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority MEDIUM 43

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.jsp, parameter: docum…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02672 Published 2017-10-02 No fix listed CWE-89
TI-2017-10818 CVE-2017-14757 · GHSA-5v2j-q264-q2xm

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority MEDIUM 42

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.actio…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01895 Published 2017-10-02 No fix listed CWE-89
TI-2017-10815 CVE-2017-14754 · GHSA-492f-73jw-9864

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority LOW 31

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, param…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01297 Published 2017-10-02 No fix listed CWE-22
TI-2017-10816 CVE-2017-14755 · GHSA-fwjj-f95v-mhhq

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority LOW 28

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/XPressoDoc, parameter: categoryId…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00661 Published 2017-10-02 No fix listed CWE-79
Open these records in search →