| Package | Affected versions | Patched versions |
|---|---|---|
| document sciences xpression | ≤ 4.5 |
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, parameter: xsd_datasource_schema_file filename. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free