CVE-2017-14757: Improper Neutralization of Special Elements used in an SQL Command

OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an...

PT-2017-13672

Name of the Vulnerable Software and Affected Versions OpenText Document Sciences xPression versions prior to v4.5SP1 Patch 13 Description The issue allows for SQL Injection, specifically through the "/xDashboard/html/jobhistory/downloadSupportFile.action" API endpoint, with the jobRunId parameter...