CveMateVulnerability intelligence

Opentext vulnerabilities, page 5

220 vulnerabilities

Known vulnerabilities in Opentext products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 76 products.

CVE-2025-12454opentextvertica+17mo ago13-03-2026 18:30

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X.CVE-2025-8049opentextflipper1y ago20-10-2025 19:56

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2.CVE-2025-8716opentextopentext content management1y ago11-09-2025 13:42

In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known.CVE-2025-8055opentextxm_fax+18mo ago19-02-2026 22:21

Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2.CVE-2025-8053opentextflipper1y ago20-10-2025 19:55

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1.2.CVE-2025-8048opentextflipper1y ago20-10-2025 19:56

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.CVE-2025-8997opentextopentext enterprise security manager1y ago25-08-2025 06:30

An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.CVE-2025-8050opentextflipper1y ago21-10-2025 17:21

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.CVE-2025-8051opentextflipper1y ago20-10-2025 19:55

Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.CVE-2025-8616opentextadvanced authentication1y ago06-08-2025 14:10

A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0.CVE-2025-8054opentextxm_fax+18mo ago19-02-2026 22:21

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal. The vulnerability could allow an attacker to arbitrarily disclose content of files on the local filesystem. This issue affects XM Fax: 24.2.CVE-2025-8052opentextflipper1y ago20-10-2025 19:57

SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2.CVE-2025-3478opentextopentext enterprise security manager1y ago25-08-2025 15:46

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.CVE-2020-11846microfocusnetiq_privileged_access_manager+12y ago21-08-2024 13:37

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.CVE-2020-11843netiqaccess_manager+12y ago11-06-2024 07:23

This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before CVE-2020-11850microfocusnetiq_self_service_password_reset+12y ago21-08-2024 12:52

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6 CVE-2020-11847microfocusnetiq_privileged_access_manager+12y ago21-08-2024 13:38

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.CVE-2020-11859microfocusimanager+11y ago06-11-2024 14:10

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3 CVE-2020-11862opentextnetiq_privileged_account_manager2y ago13-03-2024 21:32

Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2.CVE-2020-25836opentextnetiq directory and resource administrator2y ago16-07-2024 21:21

Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Directory and Resource Administrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.