Opentext Documentum d2 vulnerabilities

4 CVEs affecting Opentext Documentum d2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32264, published 2024-03-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5586, published 2017-02-22. Critical severity, CVSS 9.8. EPSS: 25.3% chance of exploitation in the next 30 days. OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons…
CVE-2018-7660, published 2018-04-11. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the…
CVE-2018-7659, published 2018-04-11. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of…
CVE-2023-32264, published 2024-03-08. Medium severity, CVSS 5.8. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer.