opentext Vulnerability Advisory Catalog

Total 124 security vulnerabilities recorded for opentext software and firmware.

← Back to All Vendors
CVE-2024-4187 MEDIUM
Component: filr

Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not...

📅 2024-07-31
CVSS 5.4 Dossier →
CVE-2023-7248 MEDIUM
Component: vertica

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulnerability would affect one of V...

📅 2024-03-15
CVSS 5.0 Dossier →
Component: exceed_turbox

HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting.  ...

📅 2024-03-13
CVSS 6.4 Dossier →
Component: exceed_turbox

Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise...

📅 2024-03-13
CVSS 4.7 Dossier →
Component: exceed_turbox

Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of re...

📅 2024-03-13
CVSS 8.6 Dossier →
Component: netiq_privileged_account_manager

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flood...

📅 2024-03-13
CVSS 8.6 Dossier →
Component: alm_octane

Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code executio...

📅 2024-02-15
CVSS 7.5 Dossier →
CVE-2023-4554 MEDIUM
Component: appbuilder

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe...

📅 2024-01-29
CVSS 4.9 Dossier →
CVE-2023-4553 MEDIUM
Component: appbuilder

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewa...

📅 2024-01-29
CVSS 5.3 Dossier →
CVE-2023-4552 MEDIUM
Component: appbuilder

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the...

📅 2024-01-29
CVSS 5.5 Dossier →
Component: appbuilder

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionalit...

📅 2024-01-29
CVSS 7.2 Dossier →
Component: appbuilder

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe Sys...

📅 2024-01-29
CVSS 7.5 Dossier →
Component: archive_center_administration

The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenText Archive Center Administratio...

📅 2023-05-24
CVSS 7.1 Dossier →
Component: documentum_content_server

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The soft...

📅 2023-05-18
CVSS 7.8 Dossier →
CVE-2022-35898 CRITICAL
Component: bizmanager

OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to cha...

📅 2023-05-01
CVSS 9.8 Dossier →
Component: opentext_extended_ecm

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java application server can be used to bypass the authentication o...

📅 2023-01-18
CVSS 8.8 Dossier →
Component: opentext_extended_ecm

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common Gateway Interface (CGI) program cs.exe allows an attacker t...

📅 2023-01-18
CVSS 8.8 Dossier →
Component: opentext_extended_ecm

A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). Multiple endpoints allow the user to pass the ...

📅 2023-01-18
CVSS 8.8 Dossier →
Component: opentext_extended_ecm

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint notify.localizeEmailTemplate allows a low-privilege user ...

📅 2023-01-18
CVSS 8.8 Dossier →
Component: opentext_extended_ecm

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The action xmlexport accepts the parameter requestContext. If this par...

📅 2023-01-18
CVSS 7.5 Dossier →
Component: opentext_extended_ecm

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint itemtemplate.createtemplate2 allows a low-privilege user ...

📅 2023-01-18
CVSS 8.1 Dossier →
Component: opentext_extended_ecm

An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request handler for ll.KeepAliveSession sets a valid AdminPwd cook...

📅 2023-01-18
CVSS 8.8 Dossier →
Component: brava\!_desktop

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16....

📅 2021-08-03
CVSS 7.8 Dossier →
Component: brava\!_desktop

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16....

📅 2021-08-03
CVSS 7.8 Dossier →
Page 2 of 6 (124 Total Records)