Auth bypass in Opentext™ Operations Bridge Manager
CVE-2025-3272
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.
Vulnerability class: Broken Access Control
EPSS: 0.002 (7.1th percentile) — read the EPSS interpretation.
Affected products
- Opentext™ Operations Bridge Manager — versions 24.2, 24.4