$ cve CVE-2017-14960 JSON

CVE-2017-14960 EXPLOIT

7.5

HIGH · CVSS 3.0 · EPSS 3.7% (pctl 90)

Patch early

A public exploit exists.

xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.

CVSS	7.5 (HIGH, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS	3.74% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-89
On CISA KEV	no
Public exploit	yes
Published	2018-01-04
Last modified	2026-06-17

Vendor	Product
opentext	document sciences xpression

Source	Title	Date
exploit-db	EMC xPression 4.5SP1 Patch 13 - 'model.jobHistoryId' SQL Injection	2018-01-03