Docuware

docuware

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Fulltext Server

fulltext_server

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15044 1Docuware 1Fulltext Server May 13, 2026 Nov 21, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the...Show more The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by modifying text. The default installation is unsafe because the server listens on the network interface, not the localhost interface.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-15044

1Docuware

1Fulltext Server

May 13, 2026

Nov 21, 2017

N/A· v4

8.8 HIGH· v3

6.5 MEDIUM· v2

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by modifying text. The default installation is unsafe because the server listens on the network interface, not the localhost interface.Show less