Page History

Versions Compared

Old Version 1

changes.mady.by.user Jules

Saved on Jan 03, 2020

compared with

New Version Current

changes.mady.by.user Jules

Saved on Jul 02, 2020

Key

This line was added.
This line was removed.
Formatting was changed.

Comment: Updated by Esko.Confluence integration from workflowwiki

Summary

Security scan reveals XXE vulnerability in the "saved search" area.

Symptoms

The name of a saved search can contain special characters which can be interpreted as a script and will be executed.
This is a low risk security issue since global searches can only be created by admin users.

More Information

For installation instructions and to download the hotfix, go to https://mysoftware.esko.com/Hotfixes/Details/201806015/18.0.1.

Article information
Applies to	WebCenter 18.0.1
Created	26 Dec 2019
Last revised
Author	JEPE
Case Number	WCR-27926

Panel

title	Contents

Table of Contents

class	inline-toc

Info

What is a Hotfix?

A Hotfix is a software package that you can install on an existing installation of our software. Each hotfix contains fixes for one or more known issues in our released software.

Because there is always a small chance for a hotfix to cause new issues, you should only install Recommended Hotfixes, unless otherwise instructed by your Esko Software Support team.