← Back

Documentum D2

documentum_d2

Vendor: Opentext • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-7660
1Opentext
1Documentum D2
Jun 17, 2026
Apr 11, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase o...Show more
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase or _username parameter.Show less
CVE-2018-7659
1Opentext
1Documentum D2
Jun 17, 2026
Apr 11, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image fi...Show more
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file.Show less
CVE-2017-5586
1Opentext
1Documentum D2
May 13, 2026
Feb 22, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libr...Show more
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.Show less