CVE-2017-14525: Opentext Documentum Administrator

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.

Affected products

• Opentext Documentum Administrator: version 7.2.0180.0055 only
• Opentext Documentum Webtop: version 6.8.0160.0073 only

Published 2017-09-28. Last modified 2026-06-17.