Browse CVEs

CRITICAL 9.8 CVE-2017-14759 OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone … Document Sciences Xpression after 4.5 Fix from $2,3002017-10-03 HIGH 8.8 CVE-2017-14757 OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone … Document Sciences Xpression after 4.5 Fix from $1,9502017-10-03 HIGH 8.8 CVE-2017-14758 OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone … Document Sciences Xpression after 4.5 Fix from $1,9502017-10-03 MEDIUM 6.5 CVE-2017-14754 OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone … Document Sciences Xpression after 4.5 Fix from $1,6002017-10-03 MEDIUM 6.1 CVE-2017-14755 OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone … Document Sciences Xpression after 4.5 Fix from $1,6002017-10-03 MEDIUM 6.1 CVE-2017-14756 OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone … Document Sciences Xpression after 4.5 Fix from $1,6002017-10-03 HIGH 8.8 CVE-2017-14526 Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list th… Documentum Administrator Mitigation only Fix from $1,9502017-09-28 HIGH 8.8 CVE-2017-14527 Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the conte… Documentum Administrator No fix yet Fix from $1,9502017-09-28 MEDIUM 6.1 CVE-2017-14524 Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web s… Documentum Administrator Mitigation only Fix from $1,6002017-09-28 MEDIUM 6.1 CVE-2017-14525 Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites an… Documentum Administrator Mitigation only Fix from $1,6002017-09-28 MEDIUM 6.1 CVE-2017-8892 Cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via… Tempo Box No fix yet Fix from $1,6002017-05-10 HIGH 8.8 CVE-2017-7221 OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute a… Documentum Content Server No fix yet Fix from $1,9502017-04-25 HIGH 8.8 CVE-2017-7220 OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE dm_dbo.d… Documentum Content Server No fix yet Fix from $1,9502017-04-21 CRITICAL 9.8 CVE-2017-5586EPSS 25% OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, r… Documentum D2 No fix yet Fix from $2,3002017-02-22 HIGH 8.8 CVE-2017-5585 OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based co… Documentum Content Server No fix yet Fix from $1,9502017-02-22 CRITICAL 9.8 CVE-2016-2002 The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2… Vertica 7.0.2.12 / 7.1.2-12+ Fix from $2,3002016-04-20 HIGH 7.5 CVE-2015-6867 The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands v… Vertica Mitigation only Fix from $1,9502015-11-04 MEDIUM 6.8 CVE-2013-6806 OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a cr… Exceed Ondemand Mitigation only Fix from $1,6002014-05-19 MEDIUM 6.8 CVE-2013-6807 The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certi… Exceed Ondemand Mitigation only Fix from $1,6002014-05-19 MEDIUM 6.4 CVE-2013-6994 OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing… Exceed Ondemand Mitigation only Fix from $1,6002014-05-19 MEDIUM 5.0 CVE-2013-6805 OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffi… Exceed Ondemand Mitigation only Fix from $1,6002014-05-19 MEDIUM 6.8 CVE-2013-3243 Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors. Opentext\/ixos Ecm For Sap Netweaver No fix yet Fix from $1,6002013-10-28 MEDIUM 6.8 CVE-2010-5283 Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of… Livelink Ecm No fix yet Fix from $1,6002012-11-26 HIGH 7.5 CVE-2004-0037 FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages. Opentext Firstclass Desktop Client Mitigation only Fix from $1,9502004-01-20 MEDIUM 5.0 CVE-2001-0631 Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' fie… Firstclass No fix yet Fix from $1,6002001-08-22