XSS in Opentext Enterprise Security Manager

CVE-2025-3478

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (21.8th percentile) — read the EPSS interpretation.

Affected products

Opentext Enterprise Security Manager — versions 0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@opentext.com (vendor-advisory)