CVE-2017-14754

OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource_group_xsd.jsp, parameter: xsd_datasource_schema_file filename. In order for this vulnerability to be exploited, an attacker must authenticate to the application first.

• CWE-22

• http://seclists.org/fulldisclosure/2017/Sep/92Mailing List, Third Party Advisory
• https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774Permissions Required, Vendor Advisory
• http://seclists.org/fulldisclosure/2017/Sep/92Mailing List, Third Party Advisory
• https://knowledge.opentext.com/knowledge/llisapi.dll/Open/68982774Permissions Required, Vendor Advisory

Published

Oct 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14746Use-after-free vulnerability in Samba 4.x before 4.7.3 allow…9.8
• CVE-2017-14748Race condition in Blizzard Overwatch 1.15.0.2 allows remote …
• CVE-2017-14749JerryScript 1.0 allows remote attackers to cause a denial of…
• CVE-2017-14751The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, r…
• CVE-2017-14752Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 be…
• CVE-2017-14753Cross-site scripting (XSS) vulnerability in the EyesOfNetwor…
• CVE-2017-14755OpenText Document Sciences xPression (formerly EMC Document …
• CVE-2017-14756OpenText Document Sciences xPression (formerly EMC Document …
• CVE-2017-14757OpenText Document Sciences xPression (formerly EMC Document …
• CVE-2017-14758OpenText Document Sciences xPression (formerly EMC Document …
• CVE-2017-14759OpenText Document Sciences xPression (formerly EMC Document …
• CVE-2017-1476IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8…5.9