Vulnerabilities > CVE-2022-45923 - Deserialization of Untrusted Data vulnerability in Opentext Extended ECM 21.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common Gateway Interface (CGI) program cs.exe allows an attacker to increase/decrease an arbitrary memory address by 1 and trigger a call to a method of a vftable with a vftable pointer value chosen by the attacker.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |