CVE-2013-6174: Multiple open redirect vulnerabilities in xAdmin in EMC Document Sciences xPression 4.1 SP1 before Patch 47...

Security readout for executives and security teams

This CVE covers open redirect flaws in EMC Document Sciences xPression xAdmin. An attacker could craft links that appear to involve a trusted xPression system but send users to attacker-controlled sites, supporting phishing. The source bundle does not provide CVSS severity or evidence of active exploitation. Exposure is likely limited to organizations still running the named EMC Document Sciences xPression versions, especially where xAdmin is reachable by users or externally accessible. Current exposure cannot be inferred from the sources. Treat as a targeted phishing risk rather than a direct system takeover based on the available sources. Prioritize if xAdmin is internet-facing, used by many staff, or tied to sensitive customer communications. Mitigation focus: Confirm whether xPression xAdmin is deployed and reachable.; Patch 4.1 SP1 to Patch 47 or later.; Patch 4.2 to Patch 26 or later..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.