Lucene search

K
cvelistMitreCVELIST:CVE-2017-14757
HistoryOct 02, 2017 - 5:00 p.m.

CVE-2017-14757

2017-10-0217:00:00
mitre
www.cve.org
6

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

55.6%

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

55.6%