CVE-2017-14759: XEE
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. An unauthenticated user is able to read directory listings or system files, or cause SSRF or Denial of Service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14759?
CVE-2017-14759 is categorized as a high severity vulnerability due to its potential to expose sensitive directory information.
How do I fix CVE-2017-14759?
To fix CVE-2017-14759, update OpenText Document Sciences xPression to the latest version that addresses this vulnerability.
Who is affected by CVE-2017-14759?
CVE-2017-14759 affects OpenText Document Sciences xPression version 4.5SP1 Patch 13 and potentially earlier versions.
What type of vulnerability is CVE-2017-14759?
CVE-2017-14759 is an XML External Entity (XXE) vulnerability that allows unauthorized information disclosure.
Can CVE-2017-14759 be exploited remotely?
Yes, CVE-2017-14759 can be exploited remotely by unauthenticated users to access sensitive files.