Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: OpenText Component: Document Sciences Xpression Clear all filters
TI-2017-10820 CVE-2017-14759 · GHSA-p2jv-394x-276f

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority MEDIUM 45

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01311 Published 2017-10-02 No fix listed CWE-611
TI-2017-10819 CVE-2017-14758 · GHSA-94mv-wvq3-pm2g

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority MEDIUM 43

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.jsp, parameter: docum…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02672 Published 2017-10-02 No fix listed CWE-89
TI-2017-10818 CVE-2017-14757 · GHSA-5v2j-q264-q2xm

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority MEDIUM 42

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.actio…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01895 Published 2017-10-02 No fix listed CWE-89
TI-2017-10816 CVE-2017-14755 · GHSA-fwjj-f95v-mhhq

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority LOW 28

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/XPressoDoc, parameter: categoryId…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00661 Published 2017-10-02 No fix listed CWE-79
TI-2017-10815 CVE-2017-14754 · GHSA-492f-73jw-9864

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1…

Priority LOW 31

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, param…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01297 Published 2017-10-02 No fix listed CWE-22