Filtered by vendor Opentext Subscriptions
Filtered by product Documentum D2 Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-5586 1 Opentext 1 Documentum D2 2024-08-05 N/A
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.
CVE-2018-7659 1 Opentext 1 Documentum D2 2024-08-05 N/A
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file.
CVE-2018-7660 1 Opentext 1 Documentum D2 2024-08-05 N/A
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase or _username parameter.