CVE-2017-5585 - CVE House
Back to Database
Status published High CVE-2017-5585

OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3,...

Vulnerability Description

OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2520.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-5585

Credits & Attribution

No credits recorded in the NVD database.

References

More from opentext

View All →
CVE-2025-8053
Insufficient access control vulnerability has been discovered in Opentext Flipper.
Low 1
CVE-2025-8052
HQL Injection vulnerability has been discovered in Opentext Flipper.
Low 1
CVE-2025-8051
Path traversal validation vulnerability has been discovered in opentext Flipper.
Medium 5.3
CVE-2025-8050
External Control of File vulnerability has been discovered in opentext Flipper.
Medium 5.3
CVE-2025-8049
Insufficient Access Control vulnerability has been discovered in OpenText Flipper.
Low 2.3

Affected Vendor

Affected Software

documentum content server
Vulnerable Versions:
7.3

Timeline

Official Publish: February 22nd, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.