CRITICAL🇵🇱 Wersja polska

CVE-2017-5586

CVSS 9.8v3.0pub. 2017-02-22upd. 2026-05-13

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Opentext Documentum D2

    APP
    Opentext
    4.04.14.24.34.44.54.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-7659MEDIUM5.4same product

In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potent...

CVE-2018-7660MEDIUM5.4same product

In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could pot...

CVE-2022-35898CRITICAL9.8PL ✓same vendor

OpenText BizManager — nieautoryzowana zmiana hasła dowolnego użytkownika

CVE-2017-5802CRITICAL9.8PL ✓same vendor

Zdalne przejęcie uprawnień w HPE Vertica Analytics Platform

CVE-2017-14759CRITICAL9.8PL ✓same vendor

XXE w OpenText xPression — nieautoryzowany odczyt plików i SSRF