CVSS 3.0
6.1 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2017-14524
Medium (6.1) in opentext. EPSS 2.9% chance of exploitation in the next 30 days.
Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.
Severity
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-11-01)
- CWE
- CWE-601
- Published
- Modified
- Record from
- the NVD, synced