Marcin Woloszyn

Researcher fromING Services Polska
#13855of 60,401
23Total CVSS
Vulnerabilities · 3
Medium
1
High
2
PT-2017-13672
2017-10-02
8.8
CVE-2017-14757
Opentext
Opentext Document Sciences Xpression
The issue allows for SQL Injection, specifically through the "/xDashboard/html/jobhistory/downloadSupportFile.action" API endpoint, with the `jobRunId` parameter being vulnerable. An attacker must first authenticate to the application to exploit this issue.
PT-2017-13673
2017-10-02
8.8
CVE-2017-14758
Opentext
Opentext Document Sciences Xpression
The issue allows for SQL Injection, specifically through the `/xAdmin/html/cm doclist view uc.jsp` API endpoint, with the vulnerable parameter being `documentId`. An attacker must first authenticate to the application to exploit this issue.
PT-2017-18830
2017-05-29
5.4
CVE-2017-9298
Hitachi
Hitachi Replication Manager
A cross-site scripting issue allows authenticated remote users to execute arbitrary JavaScript code.