CVE-2017-14757: Opentext Document Sciences Xpression

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.

Affected products

• Opentext Document Sciences Xpression: up to and including 4.5

Published 2017-10-03. Last modified 2026-06-17.