OpenText

Latest CVEs · RSS

• CVE-2026-75120 2026-10-13 · CVSS 9.3
  The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assuran
• CVE-2025-15591 2026-10-06 · CVSS 5.3
  Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums we
• CVE-2026-12559 2026-09-24 · CVSS 7.3
  A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Un
• CVE-2025-3271 2026-09-09 · CVSS 4.8
  Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS
• CVE-2026-13202 2026-08-17 · CVSS 7.3
  A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2.
• CVE-2026-11877 2026-06-24 · CVSS 6.3
  An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.
• CVE-2026-11878 2026-06-24 · CVSS 8.2
  Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).
• CVE-2025-15610 2026-04-15 · CVSS 9.3
  The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environ
• CVE-2026-2123 2026-03-31 · CVSS 8.6
  A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run
• CVE-2024-11604 2026-03-27 · CVSS 7.3
  Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows
• CVE-2025-13478 2026-03-27 · CVSS 8.4
  Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via
• CVE-2026-3278 2026-03-18 · CVSS 7.4
  Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scriptin
• CVE-2025-12453 2026-03-13 · CVSS 5.1
  Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability
• CVE-2025-12454 2026-03-13 · CVSS 5.1
  Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability
• CVE-2025-12455 2026-03-13 · CVSS 5.1
  Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulnerability could lead to Password Brute Forcing in Ve
• CVE-2026-3266 2026-03-03 · CVSS 8.3
  Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do
• CVE-2025-9120 2026-02-24 · CVSS 8.6
  Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection.  The vulnerability cou
• CVE-2026-1658 2026-02-19 · CVSS 5.3
  User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.  The vulnerability could be
• CVE-2025-9208 2026-02-19 · CVSS 7.5
  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored
• CVE-2025-13671 2026-02-19 · CVSS 5.9
  Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user,
• CVE-2025-13672 2026-02-19 · CVSS 7.0
  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflect
• CVE-2025-8054 2026-02-19 · CVSS 7.1
  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal.  The vulnerability coul
• CVE-2025-8055 2026-02-19 · CVSS 5.3
  Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.  The vulnerability could allow an attacker to perfo
• CVE-2025-15579 2026-02-18 · CVSS 9.5
  Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.  The vulnerability could lead to remote code execution
• CVE-2024-9432 2026-01-30 · CVSS 6.9
  Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data.   The vulnerability could read Vertica a