CVE-2023-32264CWE-1385

CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2

Medium · published March 8, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-1385 · Missing Origin Validation in WebSockets
Published
2024-03-08T20:48Z
EPSS history
Timeline
  • 08 MAR 20:48Z
    CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2
    cvelistv5