Opentext vulnerabilities

Products

• Brava! Desktop 36
• Brava\! Desktop 35
• Identity Manager 32
• Imanager 26
• Netiq Access Manager 20
• Arcsight Logger 14
• Arcsight Management Center 9
• Documentum Content Server 9
• Vertica 8
• Document Sciences Xpression 7
• Extended Ecm 7
• Edirectory 6
• Flipper 6
• Netiq Advance Authentication 6
• Operations Agent 6
• Appbuilder 5
• Arcsight Platform 5
• Documentum Webtop 5
• Application Automation Tools 5
• Privileged Access Manager 5
• Arcsight Enterprise Security Manager 4
• Documentum Administrator 4
• Exceed Ondemand 4
• Access Manager 3
• Advanced Authentication 3
• Alm Octane 3
• Arcsight Intelligence 3
• Arcsight Intelligence 3
• Asset Management X (amx) 3
• Directory Services 3
• Documentum D2 3
• Exceed Turbox 3
• Filr 3
• Livelink Ecm 3
• Content Management 3
• Directory Services 3
• Directory Services (otds) 3
• Secure Content Manager 3
• Service Management Automation X (smax) 3
• Web Site Management Server 3

Show 15 moreShow less

• Advance Authentication 2
• Advanced Authentication Server 2
• Alm Octane. 2
• Brava\! 2
• Content Server 2
• Dimensions Rm 2
• Dimensions Rm 2
• Firstclass 2
• Enterprise Security Manager 2
• Performance Center 2
• Privileged Access Manager 2
• Pvcs Version Manager 2
• Pvcs Version Manager 2
• Self Service Password Reset 2
• Xm Fax 2

Newest

• opentext directory services (otds) A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows... CVE-2026-18159 5.3 MediumNovember 5, 2026
• opentext directory services (otds) Improper neutralization of input during web page generation ('cross-site scripting')... CVE-2026-76580 6.3 MediumNovember 5, 2026
• opentext directory services (otds) A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse... CVE-2026-19134 7.1 HighNovember 5, 2026
• opentext operations bridge manager, universal discovery and cmdb +1 more Open redirect vulnerability - UCMDB/Operations Bridge Manager CVE-2026-1339 5.1 MediumNovember 5, 2026
• opentext advanced authentication server Logon bypass (trust of attacker-controlled completed-methods list) CVE-2026-112256 9.2 CriticalOctober 29, 2026
• opentext advanced authentication server Endpoint credential minting (insecure default allow-list) CVE-2026-112255 2.9 LowOctober 29, 2026
• elastic endpoint security, opentext endpoint forensics & response, endpoint investigator +1 more +3 more Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents CVE-2026-75120 9.3 CriticalOctober 13, 2026
• opentext content management Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management CVE-2025-15591 5.3 MediumOctober 6, 2026
• opentext vendor invoice management for sap solutions Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application CVE-2026-12559 7.3 HighSeptember 24, 2026
• opentext directory services HTML Injection in OTDS Swagger UI CVE-2026-13202 7.3 HighAugust 17, 2026
• microfocus access manager Missing Authorization Vulnerability in OpenText Access Manager CVE-2026-11877 6.3 MediumJune 24, 2026
• microfocus access manager Reflected Cross-Site Scripting vulnerability in OpenText Access Manager CVE-2026-11878 8.2 HighJune 24, 2026
• opentext identity manager Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User... CVE-2026-46810 6.5 MediumJune 16, 2026
• opentext identity manager Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy... CVE-2026-46807 9.8 CriticalJune 16, 2026
• opentext identity manager Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST... CVE-2026-35269 7.5 HighJune 16, 2026
• opentext identity manager Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core). ... CVE-2026-35268 9.9 CriticalJune 16, 2026
• opentext identity manager Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST... CVE-2026-35267 8.8 HighJune 16, 2026
• opentext identity manager Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). ... CVE-2026-35265 8.8 HighJune 16, 2026
• microfocus operations agent Privilege escalation vulnerability in Operations Agent CVE-2026-2123 8.6 HighMarch 31, 2026
• opentext idm driver and extensions Insertion of Sensitive Information into Log File CVE-2024-11604 7.3 HighMarch 27, 2026
• opentext identity manager Cache Misconfiguration Leading to Cross-User Data Exposure CVE-2025-13478 8.4 HighMarch 27, 2026
• opentext zenworks service desk XSS Vulnerability discovered in OpenText™ ZENworks Service Desk. CVE-2026-3278 7.4 HighMarch 18, 2026
• opentext vertica Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. CVE-2025-12453 5.1 MediumMarch 13, 2026
• opentext vertica Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. CVE-2025-12454 5.1 MediumMarch 13, 2026
• opentext vertica Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. CVE-2025-12455 5.1 MediumMarch 13, 2026
• opentext filr Improper access control vulnerability has been discovered in OpenText™ Filr. CVE-2026-3266 8.3 HighMarch 3, 2026
• opentext directory services Content spoofing vulnerability discovered in OpenText™ Directory Services CVE-2026-1658 5.3 MediumFebruary 19, 2026
• opentext web site management server Stored-XSS vulnerability discovered in OpenText WSM Management Server. CVE-2025-9208 7.5 HighFebruary 19, 2026
• opentext web site management server Cross Site request forgery vulnerability discovered in OpenText WSM Management Server. CVE-2025-13671 5.9 MediumFebruary 19, 2026
• opentext web site management server Reflected Cross-Site Scripting discovered in OpenText WSM Management Server. CVE-2025-13672 7.0 HighFebruary 19, 2026
• opentext xm fax Path Traversal vulnerability have been discovered in OpenText™ XM Fax. CVE-2025-8054 7.1 HighFebruary 19, 2026
• opentext xm fax SSRF vulnerability have been discovered in OpenText™ XM Fax CVE-2025-8055 5.3 MediumFebruary 19, 2026
• opentext identity manager, oracle fusion middleware +1 more Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST... CVE-2025-61757 In KEVPublic exploit EPSS 88.6% 9.8 CriticalOctober 21, 2025
• opentext flipper External Control of File vulnerability has been discovered in opentext Flipper. CVE-2025-8050 5.3 MediumOctober 21, 2025
• opentext flipper HQL Injection vulnerability has been discovered in Opentext Flipper. CVE-2025-8052 1.0 LowOctober 20, 2025
• opentext flipper External Control of File path vulnerability has been discovered on Openext Flipper. CVE-2025-8048 5.3 MediumOctober 20, 2025
• opentext flipper Insufficient Access Control vulnerability has been discovered in OpenText Flipper. CVE-2025-8049 2.3 LowOctober 20, 2025
• opentext flipper Path traversal validation vulnerability has been discovered in opentext Flipper. CVE-2025-8051 5.3 MediumOctober 20, 2025
• opentext flipper Insufficient access control vulnerability has been discovered in Opentext Flipper. CVE-2025-8053 1.0 LowOctober 20, 2025
• opentext content management Cache exploitation vulnerability CVE-2025-8716 5.8 MediumSeptember 11, 2025
• opentext self service password reset Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset CVE-2025-5808 7.3 HighAugust 29, 2025
• opentext enterprise security manager OpenText Enterprise Security Manager Stored XSS CVE-2025-3478 8.5 HighAugust 25, 2025
• opentext enterprise security manager OpenText Enterprise Security Manager Information Exposure CVE-2025-8997 5.7 MediumAugust 25, 2025
• opentext advanced authentication Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication CVE-2025-8616 6.1 MediumAugust 6, 2025
• opentext advanced authentication Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication. CVE-2025-2236 2.1 LowMay 27, 2025
• opentext advance authentication Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication CVE-2024-10865 9.4 CriticalMay 14, 2025
• opentext advance authentication SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication. CVE-2024-10864 7.5 HighMay 14, 2025
• opentext content management A user enumeration and subsequent data integrity vulnerability affecting barcode functionality CVE-2024-12543 5.9 MediumApril 21, 2025
• opentext content management Stored XSS in Discussions functionality CVE-2024-12863 5.6 MediumApril 21, 2025
• opentext arcsight enterprise security manager Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager CVE-2025-2517 2.3 LowApril 21, 2025
• Show olderLoading…