CVE-2017-14759

Published: 2017-10-03T01:29Z

Last Modified: 2024-11-21T03:13Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt