Auth bypass in Opentext™ Groupwise
CVE-2025-0885
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.
Vulnerability class: Broken Access Control
EPSS: 0.001 (2.7th percentile) — read the EPSS interpretation.
Affected products
- Opentext™ Groupwise — versions 7, 23.4, 24.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-0885?
- CVE-2025-0885 is a vulnerability in Opentext™ Groupwise, classified under Incorrect Authorization. Published 2025-07-03.
- Is CVE-2025-0885 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.