PT-2018-18191 · Opentext · Opentext Documentum D2 Webtop

Vipin Chaudhary · Published 2018-04-11 · Updated 2018-05-16 · CVE-2018-7660

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenText Documentum D2 Webtop version 4.6.0030 build 059

Description A Reflected Cross-Site Scripting issue could potentially be exploited by malicious users to compromise the affected system. The issue is related to the servlet/Download, docbase or username parameter.

Recommendations For OpenText Documentum D2 Webtop version 4.6.0030 build 059, consider restricting access to the servlet/Download endpoint and avoid using the docbase or username parameter until a fix is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-7660

Affected Products

Opentext Documentum D2 Webtop

References · 3

• 🔥 https://vipinxsec.blogspot.com/2018/04/reflected-xss-in-documentum-d2.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-7660 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7660 · Security Note