CVE-2023-7249

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...

6.3 Medium

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: Active

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.58%Up 0.5 points since Aug 13, 2024

What each source reports

CVE List Score used 6.3

Record: CVE-2023-7249
CVSS 4.0: 6.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/S:N/AU:Y/R:A/V:D/RE:L/U:Amber
Weakness: CWE-22
Updated: 2026-11-02

EUVDEUVD-2023-59430 6.3

Record: EUVD-2023-59430
CVSS 4.0: 6.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/S:N/AU:Y/R:A/V:D/RE:L/U:Amber
Updated: 2026-11-03

GitHub AdvisoriesGHSA-m37f-qr93-p7wv 6.3

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...

Record: GHSA-m37f-qr93-p7wv
CVSS 4.0: 6.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:D/RE:L/U:Amber
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-22
Updated: 2026-11-02

NVD 6.3

Record: CVE-2023-7249
CVSS 4.0: 6.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:D/RE:L/U:Amber
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-22
Updated: 2026-11-02

Affected products

opentext directory services

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-7249 is a medium vulnerability (CVSS 6.3) in Opentext Directory Services, published August 12, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. No source names a fixed version.