CVE-2017-14756: Improper Neutralization of Input During Web Page Generation

OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Cross-Site Scripting: /xAdmin/html/Deployment catid...

PT-2017-13671

Name of the Vulnerable Software and Affected Versions OpenText Document Sciences xPression versions prior to v4.5SP1 Patch 13 Description The issue is related to Cross-Site Scripting. The /xAdmin/html/Deployment API endpoint is affected, specifically the cat id variable. Recommendations For...