CVE-2017-5586

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

25%p98

Published

Feb 22, 2017 (Feb 22, 2017)

Modified

Jun 17, 2026

Description

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.

Vendors: opentext
Products: documentum d2
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (25.3%)

In the news0 stories

No ingested article mentions this CVE yet.