Security Advisory

CVE-2017-14759

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-02 17:00:00

Last updated 2024-08-05 19:34:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service.

← Browse all CVEs View on cve.org ↗