XXE in Opentext™ Operations Bridge Manager
CVE-2021-22501
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited to confidential information This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10.
Vulnerability class: XXE (XML External Entity)
EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.
Affected products
- Opentext™ Operations Bridge Manager — versions 2017.05, 2017.11, 2018.05