CVE-2017-14524: Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote atta...

Security readout for executives and security teams

This CVE describes open redirects in OpenText Documentum Administrator 7.2.0180.0055. An attacker could craft trusted-looking links that send users to attacker-controlled sites, supporting phishing or credential theft. The available sources do not indicate direct system compromise, a CVSS score, or confirmed active exploitation. Likely exposure is organizations running OpenText Documentum Administrator 7.2.0180.0055, particularly if users access it through web links, SSO, or externally reachable portals. The bundle’s affected-product metadata is incomplete, so validate against OpenText guidance and internal asset records. Prioritize as a phishing-risk issue, not an emergency remote-code-execution event. Address exposed or identity-integrated Documentum deployments first, because trusted enterprise URLs can make phishing more credible. Mitigation focus: Check OpenText advisory 68982774 for vendor-confirmed remediation guidance.; Restrict external access to Documentum Administrator where business allows.; Review login and SSO flows for unsafe redirect handling..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.