medium6.1
CVE-2017-14524
Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and c…
Impact
Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opentext | Documentum Administrator | Version 7.2.0180.0055 |
| Opentext | Documentum Webtop | Version 6.8.0160.0073 |