CVE:CVE-2017-14526
CNNVD:CNNVD-201709-732
OpenText Documentum Administrator是加拿大OpenText公司的一套基于Web用来执行Documentum系统管理任务的开发工具。
OpenText Documentum Administrator 7.2.0180.0055版本中存在XML外部实体注入漏洞。远程攻击者可利用该漏洞列出任意目录的内容，造成拒绝服务或获取Documentum用户散列。
solution:Upgrade opentext documentum_administrator to a higher version than 7.2.0180.0055,and avoid the version 7.2.0180.0055; Upgrade opentext documentum_webtop to a higher version than 6.8.0160.0073,and avoid the version 6.8.0160.0073