Opentext
Page 3 of 3 — Opentext CVEs from a corpus of 242, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3010 | Medium | 5.4 | 2021-02-26 | There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a… |
CVE-2019-12270 | High | 7.4 | 2019-05-21 | OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache fi… |
CVE-2018-20165 | Medium | 6.1 | 2019-03-22 | Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to… |
CVE-2019-7416 | Medium | 6.1 | 2019-03-21 | XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable. |
CVE-2018-7660 | Medium | 5.4 | 2018-04-11 | In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compr… |
CVE-2018-7659 | Medium | 5.4 | 2018-04-11 | In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromi… |
CVE-2017-5802 | Critical | 9.8 | 2018-02-15 | A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found. |
CVE-2017-14960 | High | 7.5 | 2018-01-04 | xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection. |
CVE-2017-15276 | High | 8.8 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user t… |
CVE-2017-15014 | Medium | 4.3 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows authenticated users to… |
CVE-2017-15013 | High | 8.8 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user t… |
CVE-2017-15012 | High | 8.8 | 2017-10-13 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which… |
CVE-2017-14759 | Critical | 9.8 | 2017-10-03 | OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML… |
CVE-2017-14758 | High | 8.8 | 2017-10-03 | OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Inj… |
CVE-2017-14757 | High | 8.8 | 2017-10-03 | OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Inj… |
CVE-2017-14756 | Medium | 6.1 | 2017-10-03 | OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-S… |
CVE-2017-14755 | Medium | 6.1 | 2017-10-03 | OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-S… |
CVE-2017-14754 | Medium | 6.5 | 2017-10-03 | OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitra… |
CVE-2017-14527 | High | 8.8 | 2017-09-28 | Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arb… |
CVE-2017-14526 | High | 8.8 | 2017-09-28 | Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents… |
CVE-2017-14525 | Medium | 6.1 | 2017-09-28 | Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct… |
CVE-2017-14524 | Medium | 6.1 | 2017-09-28 | Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and c… |
CVE-2017-8892 | Medium | 6.1 | 2017-05-10 | Cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web script or HTML persistently via the name… |
CVE-2017-7221 | High | 8.8 | 2017-04-25 | OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary c… |
CVE-2017-7220 | High | 8.8 | 2017-04-21 | OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE dm_dbo.dm_user_s S… |
CVE-2017-5586 | Critical | 9.8 | 2017-02-22 | OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to… |
CVE-2017-5585 | High | 8.8 | 2017-02-22 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config optio… |
CVE-2016-2002 | Critical | 9.8 | 2016-04-20 | The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allow… |
CVE-2015-6867 | | 2015-11-04 | The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a craft… | |
CVE-2015-6530 | | 2015-08-20 | Cross-site scripting (XSS) vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary w… | |
CVE-2013-6994 | | 2014-05-19 | OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the netwo… | |
CVE-2013-6807 | | 2014-05-19 | The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate val… | |
CVE-2013-6806 | | 2014-05-19 | OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted stri… | |
CVE-2013-6805 | | 2014-05-19 | OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the net… | |
CVE-2013-3243 | | 2013-10-28 | Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors. | |
CVE-2010-5283 | | 2012-11-26 | Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administr… | |
CVE-2010-5282 | | 2012-11-26 | Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML… | |
CVE-2008-0769 | | 2008-02-14 | Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to in… | |
CVE-2007-2976 | | 2007-06-01 | Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null ("%00") character, which allo… | |
CVE-2004-2496 | | 2004-12-31 | The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST… | |
CVE-2004-0037 | | 2004-01-20 | FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages. | |
CVE-2001-0631 | | 2001-08-22 | Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which… |