Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-14757
HistoryOct 03, 2017 - 1:29 a.m.

Sql injection

2017-10-0301:29:00
PRIOn knowledge base
www.prio-n.com
5

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.

CPENameOperatorVersion
document_sciences_xpressionle4.5

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%