Opentext Privileged Access Manager vulnerabilities

3 vulnerabilities

Known vulnerabilities in Opentext Privileged Access Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2020-11846microfocusnetiq_privileged_access_manager+1
EPSS score
0.33%
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.8.2CVE-2020-11847microfocusnetiq_privileged_access_manager+1
EPSS score
0.31%
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.8CVE-2024-12111opentextprivileged access manager
EPSS score
0.38%
In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)