CVE-2017-14755: Improper Neutralization of Input During Web Page Generation

OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Cross-Site Scripting: /xAdmin/html/XPressoDoc, parameter: categoryId...

PT-2017-13670

Name of the Vulnerable Software and Affected Versions OpenText Document Sciences xPression versions prior to v4.5SP1 Patch 13 Description The issue is related to Cross-Site Scripting. The "/xAdmin/html/XPressoDoc" API endpoint is vulnerable, specifically the categoryId parameter. Recommendations...