CVE-2017-14526

Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents…

published September 27, 2017

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a (1) crafted DTD, involving unspecified XML structures in a request to xda/com/documentum/ucf/server/transport/impl/GAIRConnector or crafted XML file in a MediaProfile file (2) import or (3) check in.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01155 · 66.6th percentile
Published
2017-09-27T17:00Z
EPSS history
Timeline
  • 27 SEP 17:00Z
    Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents…
    cvelistv5