Beveiligingsadvies

CVE-2017-14759

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-10-02 17:00:00

Laatst bijgewerkt 2024-08-05 19:34:39

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service.

← Alle CVE's bekijken Bekijk op cve.org ↗