CVE-2023-32264 MEDIUM

CVE-2023-32264

Vendor Opentext

Product Documentum D2

Weakness CWE-1385

Published March 8, 2024

Last update August 12, 2024

View on NVD All CVEs

CVSS base score

5.8/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N

What the vulnerability does

01Description

CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer.

Key dates

02Disclosure timeline

March 8, 2024 CVE published

August 12, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-32264 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1385.html

Related vulnerabilities

04Related CVE

CVE-2026-22689 Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails CVE-2024-8201 Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer CVE-2026-35589 nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) CVE-2026-27977 Next.js: null origin can bypass dev HMR websocket CSRF checks CVE-2023-30856 eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution