Security Advisory

CVE-2017-14524

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-27 17:00:00
Last updated 2024-08-05 19:27:40
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.