Medium severity · published Sep 9, 2026
CVE-2025-3271
DOM-based XSS vulnerability in OpenText™ Documentum Webtop
4.8
CVSS
0.4%
EPSS
No
On KEV
Description
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DW
Documentum Webtop · OpenText™
before 16.7.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3271
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3271
support.opentext.com
https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0869472
More from Documentum Webtop
8.8
CVE-2017-14527
Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories,…
8.8
CVE-2017-14526
Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary…
6.1
CVE-2019-7416
XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2
6.1
CVE-2017-14525
Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…
6.1
CVE-2017-14524
Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing…