CVE-2017-14526: Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 a...

Security readout for executives and security teams

This issue lets a logged-in remote user abuse XML processing in OpenText Documentum Administrator to make the server read local files, list directories, or crash. On Windows, the disclosure says it may expose Documentum user hashes. The public bundle does not provide a CVSS score or confirm active exploitation. Primary exposure is Documentum Administrator 7.2.0180.0055 reachable by authenticated users. The disclosure title also names Webtop, but the provided CVE affected data is incomplete and lists no normalized CPEs. Internet-facing or broadly accessible admin portals would raise business risk. Treat this as high priority for any exposed Documentum administration environment, especially where many users can authenticate. The impact can include sensitive file disclosure, service disruption, and possible hash exposure. Priority is lower where the product is absent or tightly isolated. Mitigation focus: Check OpenText advisory 68982774 for fixed versions or supported workarounds.; Restrict Documentum Administrator and Webtop access to trusted administrative networks.; Review authenticated user access and remove unnecessary accounts or privileges..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.