Security Advisory

CVE-2017-14527

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-27 17:00:00

Last updated 2024-08-05 19:27:40

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a (1) crafted DTD, involving unspecified XML structures in a request to xda/com/documentum/ucf/server/transport/impl/GAIRConnector or crafted XML file in a MediaProfile file (2) import or (3) check in.

← Browse all CVEs View on cve.org ↗