CVE-2017-14527: Improper Restriction of XML External Entity Reference

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DTD,...

CVE-2017-14526: Improper Restriction of XML External Entity Reference

Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DT...

PT-2017-2936

Name of the Vulnerable Software and Affected Versions OpenText Documentum Administrator version 7.2.0180.0055 Description The issue is related to incorrect restriction of XML external entities XXE in the OpenText Documentum Administrator. This can be exploited by a remote attacker to read arbitra...

PT-2017-2937

Name of the Vulnerable Software and Affected Versions OpenText Documentum Webtop versions 6.8.0160.0073 Description The issue is related to an XML external entity XXE vulnerability in the web interface of OpenText Documentum Webtop. This vulnerability can be exploited by a remote attacker to read...