PT-2018-18190
CVE-2018-7659
·
Published
2018-04-11
·
Updated
2018-05-16
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OpenText Documentum D2 Webtop version 4.6.0030 build 059
Description
A Stored Cross-Site Scripting issue could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file.
Recommendations
For OpenText Documentum D2 Webtop version 4.6.0030 build 059, consider restricting the upload of image files or validating filenames to prevent malicious input until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾