CVE-2005-1045: Centrinity Firstclass Desktop Client

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.

Affected products

• Centrinity Centrinity Firstclass Desktop Client: version 8.0 only

Published 2005-05-02. Last modified 2026-06-16.