Opentext Documentum Content Server
8 CVEs affecting Opentext Documentum Content Server. Latest disclosed: 2023-05-18. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15276 | High | 8.8 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user t… |
CVE-2017-15013 | High | 8.8 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user t… |
CVE-2017-15012 | High | 8.8 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which… |
CVE-2017-7221 | High | 8.8 | 2017-04-25 | OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary c… |
CVE-2017-7220 | High | 8.8 | 2017-04-21 | OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE dm_dbo.dm_user_s S… |
CVE-2017-5585 | High | 8.8 | 2017-02-22 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config optio… |
CVE-2023-31871 | High | 7.8 | 2023-05-18 | OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software come… |
CVE-2017-15014 | Medium | 4.3 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows authenticated users to… |