CVE-2017-14524
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 2.9%
exploitation probability
2.9%top 14% of all CVEs
observed exploitation
nono source reports it
Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/default.htm or (2) /%09/ (slash encoded horizontal tab slash) followed by a domain in the redirectUrl parameter to xda/component/virtuallinkconnect.
Affected products
n/a · n/a