Opentext

183 CVEs across 78 Opentext products. Browse Opentext vulnerabilities, severities, and proof-of-concept exploits.

Opentext products with known CVEs

ProductCVEs
Brava! Desktop36
Brava\! Desktop35
Imanager21
Documentum Content Server8
Vertica8
Document Sciences Xpression7
Opentext Extended Ecm7
Edirectory6
Flipper6
Netiq Advance Authentication6
Appbuilder5
Arcsight Platform5
Documentum Webtop5
Opentext Application Automation Tools5
Arcsight Enterprise Security Manager4
Documentum Administrator4
Exceed Ondemand4
Access Manager3
Arcsight Intelligence3
Arcsight Intelligence3
Documentum D23
Exceed Turbox3
Filr3
Livelink Ecm3
Netiq Access Manager3
Opentext Content Management3
Privileged Access Manager3
Secure Content Manager3
Web Site Management Server3
Advance Authentication2
Advanced Authentication2
Alm Octane2
Arcsight Management Center2
Brava\!2
Dimensions Rm2
Directory Services2
Firstclass2
Opentext Directory Services2
Opentext Enterprise Security Manager2
Operations Agent2
Performance Center2
Pvcs Version Manager2
Self Service Password Reset2
Xm Fax2
Alm Octane.1
Archive Center Administration1
Arcsight Logger1
Asset Management X (Amx)1
Bizmanager1
Content Server1
Opentext CVEs — newest first (page 1 of 2)
CVESeverityScorePublishedSummary
CVE-2026-11878Medium6.12026-06-24Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS)…
CVE-2026-11877High7.52026-06-24An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.
CVE-2026-2123High7.82026-03-31A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run…
CVE-2024-116042026-03-27Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows…
CVE-2025-134782026-03-27Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via…
CVE-2026-3278Medium6.12026-03-18Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripti…
CVE-2025-12455High7.52026-03-13Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulnerability could lead to Password Brute Forcing in V…
CVE-2025-12454Medium6.12026-03-13Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerabilit…
CVE-2025-12453Medium6.12026-03-13Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerabilit…
CVE-2026-3266Critical9.82026-03-03Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and d…
CVE-2026-1658Medium5.32026-02-19User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.  The vulnerability could b…
CVE-2025-9208Medium5.42026-02-19Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored…
CVE-2025-8055Medium5.32026-02-19Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.  The vulnerability could allow an attacker to perf…
CVE-2025-8054High7.52026-02-19Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal.  The vulnerability cou…
CVE-2025-13672Medium5.42026-02-19Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflec…
CVE-2025-13671Medium6.52026-02-19Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user…
CVE-2025-8050Medium6.52025-10-21External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal.  The vulnerability could allow a user to access files hosted on…
CVE-2025-8053Critical9.12025-10-20Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulne…
CVE-2025-8052High8.82025-10-20SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the database in uni…
CVE-2025-8051Medium6.52025-10-20Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.  The vulnerability could allow a user to access files hosted on the server. …
CVE-2025-8049High8.82025-10-20Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulne…
CVE-2025-8048Medium6.52025-10-20External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local fi…
CVE-2025-87162025-09-11In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server…
CVE-2025-58082025-08-29Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset fro…
CVE-2025-34782025-08-25A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.
CVE-2025-89972025-08-25An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.
CVE-2025-86162025-08-06A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Auth…
CVE-2025-22362025-05-27Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. Th…
CVE-2024-108652025-05-14Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication ve…
CVE-2024-108642025-05-14Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Adva…
CVE-2024-125432025-04-21User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authentica…
CVE-2025-25172025-04-21Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.
CVE-2024-128632025-04-21Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the syst…
CVE-2024-128622025-04-21Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove exte…
CVE-2024-125302025-04-17Uncontrolled Search Path Element vulnerability in OpenText Secure Content Manager on Windows allows DLL Side-Loading.This issue affects Secure Content Manager…
CVE-2024-127992025-03-05Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnera…
CVE-2024-12111High8.02024-12-19In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication…
CVE-2024-108632024-11-22: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: fro…
CVE-2023-24467High8.82024-11-22Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.
CVE-2023-24466High7.52024-11-22Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.
CVE-2022-26324High7.62024-11-22Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.
CVE-2021-38135High8.62024-11-22Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.
CVE-2021-38134Medium6.12024-11-22Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.
CVE-2021-38119Medium6.12024-11-22Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.
CVE-2021-38118Medium5.52024-11-22Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.
CVE-2021-38117High8.82024-11-22Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.
CVE-2021-38116High8.82024-11-22Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5
CVE-2024-9841Medium6.12024-11-08A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could…
CVE-2020-11859High7.62024-11-06Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3
CVE-2024-4692Low2.42024-10-16Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Acc…
CVE-2024-4690High8.02024-10-16Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText A…
CVE-2024-4211Low2.42024-10-16Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Acc…
CVE-2024-4189High8.02024-10-16Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText A…
CVE-2024-4184High8.02024-10-16Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText A…
CVE-2024-6360Critical9.82024-10-02Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privi…
CVE-2022-26322Medium4.92024-09-12Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. Th…
CVE-2021-38133High7.42024-09-12Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.
CVE-2021-38132Medium5.32024-09-12Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.
CVE-2021-38131Medium5.42024-09-12Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.
CVE-2021-22533Medium6.52024-09-12Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000.
CVE-2021-22532High7.62024-09-12Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000.
CVE-2021-22518Medium5.82024-09-12A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all versions…
CVE-2021-22503Medium5.42024-09-12Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000.
CVE-2024-4556Medium5.72024-08-28Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive infor…
CVE-2024-4555High7.72024-08-28Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ A…
CVE-2024-4554High7.32024-08-28Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5…
CVE-2021-38122Medium6.22024-08-28A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This iss…
CVE-2021-38121High8.32024-08-28Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. …
CVE-2021-38120Medium5.12024-08-28A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper ha…
CVE-2021-22530High8.22024-08-28A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This i…
CVE-2021-22529Medium6.32024-08-28A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version bef…
CVE-2021-22509High8.12024-08-28A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user…
CVE-2023-7260High7.52024-08-22Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files o…
CVE-2022-263282024-08-21Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on Windows allows Cros…
CVE-2022-263272024-08-21Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This…
CVE-2020-11847High8.22024-08-21SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Man…
CVE-2020-11846High8.72024-08-21A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricte…
CVE-2020-11850High7.32024-08-21Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Res…
CVE-2023-7249Critical9.82024-08-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Traversal.This…
CVE-2024-6359Medium6.42024-08-06Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.
CVE-2024-6358Medium6.32024-08-06Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.
CVE-2024-6357Medium6.32024-08-06Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.
CVE-2024-6361Medium5.42024-08-05Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulne…
CVE-2024-4187Medium5.42024-07-31Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warne…
CVE-2024-70502024-07-26Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular scenarios.This issue a…
CVE-2020-25836Medium6.32024-07-16Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Dire…
CVE-2024-4190High8.12024-06-11Stored Cross-Site Scripting (XSS) vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited.
CVE-2020-11843Medium6.52024-06-11This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before
CVE-2024-4429Medium5.42024-05-28Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.
CVE-2024-3969High7.82024-05-28XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload
CVE-2024-5202High7.72024-05-23Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices
CVE-2024-5201High8.82024-05-23Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request
CVE-2024-3482High8.72024-05-20A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability…
CVE-2024-2835High8.72024-05-20A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability…
CVE-2021-22508High7.22024-05-17A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries…
CVE-2024-3970Medium5.32024-05-15Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory…
CVE-2024-3968High7.82024-05-15Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.
CVE-2024-3967High7.62024-05-15Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deser…
CVE-2024-3488Medium5.62024-05-15File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file withou…
CVE-2024-3487Low3.52024-05-15Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypa…