Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:document_sciences_xpression:*:sp1:*:*:*:*:*:*

part: a version: * update: sp1

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductDocument Sciences Xpression (6bb10110-7a3a-51d0-b129-3b433dbbb0f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14757 vulnerable 2026-06-03 14:36:44.756347 Details available
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.
Published: 2017-10-02T17:00:00.000Z
Updated: 2024-08-05T19:34:40.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14754 vulnerable 2026-06-03 14:36:44.753671 Details available
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, parameter: xsd_datasource_schema_file filename. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.
Published: 2017-10-02T17:00:00.000Z
Updated: 2024-08-05T19:34:39.938Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.