{"id":"CVE-2023-4964","aliases":["EUVD-2023-54800","GHSA-c449-rxg5-mv8h"],"status":"published","title":"Potential open redirect vulnerability in opentext SMAX and AMX product.","description":"Potential open redirect vulnerability\nin opentext Service Management Automation X\n(SMAX)  versions 2020.05, 2020.08,\n2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset\nManagement X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The\nvulnerability could allow attackers to redirect a user to\nmalicious websites.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00344,"percentile":0.28182,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-601"],"published":"2023-10-30T14:18:59Z","modified":"2026-06-17T06:38:59Z","products":[{"vendor":"microfocus","product":"asset_management_x"},{"vendor":"microfocus","product":"service_management_automation_x"},{"vendor":"opentext","product":"asset management x (amx)"},{"vendor":"opentext","product":"service management automation x (smax)"}],"references":[{"url":"https://portal.microfocus.com/s/article/KM000022703?language=en_US","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4964"},{"url":"https://github.com/advisories/GHSA-c449-rxg5-mv8h"}],"sources":{"cve":[{"id":"CVE-2023-4964","title":"Potential open redirect vulnerability in opentext SMAX and AMX product. ","description":"Potential open redirect vulnerability\nin opentext Service Management Automation X\n(SMAX)  versions 2020.05, 2020.08,\n2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset\nManagement X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The\nvulnerability could allow attackers to redirect a user to\nmalicious websites.\n\n\n\n\n\n\n\n","status":"published","published":"2023-10-30T14:18:59.394Z","modified":"2024-09-06T20:43:19.195Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:35:30.474787Z"}],"euvd":[{"id":"EUVD-2023-54800","description":"Potential open redirect vulnerability\nin opentext Service Management Automation X\n(SMAX)  versions 2020.05, 2020.08,\n2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset\nManagement X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The\nvulnerability could allow attackers to redirect a user to\nmalicious websites.\n\n\n\n\n\n\n\n","status":"published","published":"2023-10-30T14:18:59Z","modified":"2024-09-06T20:43:19Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-03T00:56:01.134485Z"}],"ghsa":[{"id":"GHSA-c449-rxg5-mv8h","title":"Potential open redirect vulnerability\nin opentext Service Management Automation X\n(SMAX) ...","description":"Potential open redirect vulnerability\nin opentext Service Management Automation X\n(SMAX)  versions 2020.05, 2020.08,\n2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset\nManagement X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The\nvulnerability could allow attackers to redirect a user to\nmalicious websites.\n\n\n\n\n\n\n\n","status":"published","published":"2023-10-30T15:30:45Z","modified":"2023-11-08T00:30:20Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:54:53.779138Z"}],"nvd":[{"id":"CVE-2023-4964","description":"Potential open redirect vulnerability\nin opentext Service Management Automation X\n(SMAX)  versions 2020.05, 2020.08,\n2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset\nManagement X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The\nvulnerability could allow attackers to redirect a user to\nmalicious websites.\n\n\n\n\n\n\n\n","status":"published","published":"2023-10-30T15:15:42.197Z","modified":"2026-06-17T06:38:59.5Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:08:40.004465Z"}]}}