Opentext™ vulnerabilities
44 vulnerabilities
Known vulnerabilities in Opentext™ products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 30 products.
Products
30- Vertica5 vulnerabilities
- Operations Bridge Manager4 vulnerabilities
- Directory Services3 vulnerabilities
- Exceed Turbo X3 vulnerabilities
- Web Site Management Server3 vulnerabilities
- Asset Management X (Amx)2 vulnerabilities
- Filr2 vulnerabilities
- Network Node Manager I (Nnmi)2 vulnerabilities
- Service Management Automation X (Smax)2 vulnerabilities
- Service Manager2 vulnerabilities
- XM Fax2 vulnerabilities
- Accurev1 vulnerabilities
- ALM Octane.1 vulnerabilities
- ALM Octane Management1 vulnerabilities
- Application Lifecycle Management (Alm),Quality Center1 vulnerabilities
- Carbonite Safe Server Backup1 vulnerabilities
- Content Management (Extended ECM)1 vulnerabilities
- CX E Voice1 vulnerabilities
- Digital Asset Management.1 vulnerabilities
- Documentum Webtop1 vulnerabilities
- Documentum™ Server1 vulnerabilities
- Groupwise1 vulnerabilities
- Hybrid Cloud Management X (Hcmx)1 vulnerabilities
- Operations Agent1 vulnerabilities
- Operations Bridge Suite (Containerized)1 vulnerabilities
- Solutions Business Manager (Sbm)1 vulnerabilities
- Ucmdb1 vulnerabilities
- Ucmdb ( Classic And Containerized)1 vulnerabilities
- Zenworks Configuration Management (Zcm)1 vulnerabilities
- Zenworks Service Desk1 vulnerabilities
CVE-2021-22501opentext™operations bridge manager
EPSS score0.50%
Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation.
The vulnerability could be exploited to confidential information
This issue affects Operations Bridge Manager: 2017.05, 2017.11, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10.CVE-2025-13671opentextweb_site_management_server+1EPSS score0.17%
Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously.
This issue affects Web Site Management Server: 16.7.0, 16.7.1.CVE-2025-13672opentextweb_site_management_server+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerability could allow injecting malicious JavaScript inside URL parameters that was then rendered with the preview of the page, so that malicious scripts could be executed on the client side.
This issue affects Web Site Management Server: 16.7.0, 16.7.1.CVE-2025-11884opentext™ucmdbEPSS score0.23%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts
This issue affects uCMDB: 24.4.CVE-2025-0884opentext™service managerEPSS score0.16%
Unquoted Search Path or Element vulnerability in OpenText™ Service Manager.
The vulnerability could allow a user to gain SYSTEM privileges through Privilege Escalation.
This issue affects Service Manager: 9.70, 9.71, 9.72.CVE-2025-0885opentext™groupwiseEPSS score0.14%
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels.
The vulnerability could allow unauthorized access to calendar items marked private.
This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.CVE-2025-0883opentext™service managerEPSS score0.32%
Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.
The vulnerability could reveal sensitive information retained by the browser.
This issue affects Service Manager: 9.70, 9.71, 9.72, 9.80.CVE-2025-9208opentextweb_site_management_server+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerability could execute malicious scripts on the client side when the download query parameter is removed from the file URL, allowing attackers to compromise user sessions and data.
This issue affects Web Site Management Server: 16.7.X, 16.8, 16.8.1.CVE-2025-9120opentext™carbonite safe server backupEPSS score0.15%
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection.
The vulnerability could be exploited through an open port, potentially allowing unauthorized access.
This issue affects Carbonite Safe Server Backup: through 6.8.3.CVE-2025-15579opentext™directory servicesEPSS score0.43%
Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.
The vulnerability could lead to remote code execution, denial of service, or privilege escalation.
This issue affects Directory Services: before 24.4.16, from 25.1 before 25.1.9, from 25.2 before 25.2.9, from 25.3 before 25.3.8, from 25.4 before 25.4.5, from 26.1 before 26.1.2.CVE-2025-12453opentextvertica+1EPSS score0.19%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.
The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X, from 25.2.0 through 25.2.X, from 25.3.0 through 25.3.X.CVE-2025-12455opentextvertica+1EPSS score0.31%
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.
The vulnerability could lead to Password Brute Forcing in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X.CVE-2025-12454opentextvertica+1EPSS score0.19%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.
The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X, from 23.0 through 23.X, from 24.0 through 24.X, from 25.1.0 through 25.1.X.CVE-2025-8055opentextxm_fax+1EPSS score0.19%
Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.
The vulnerability could allow an attacker to
perform blind SSRF to other systems accessible from the XM Fax server.
This issue affects XM Fax: 24.2.CVE-2025-8054opentextxm_fax+1EPSS score0.36%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal.
The vulnerability could allow an attacker to arbitrarily disclose content of files on the local filesystem. This issue affects XM Fax: 24.2.CVE-2025-3271opentext™documentum webtopEPSS score0.23%
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSSCVE-2025-3476opentext™operations bridge managerEPSS score0.35%
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4.CVE-2025-3272opentext™operations bridge managerEPSS score0.18%
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.
The vulnerability could allow authenticated users to change their password without providing their old password.
This issue affects Operations Bridge Manager: 24.2, 24.4.CVE-2022-26323opentext™operations bridge manager+2EPSS score0.34%
Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation.
The vulnerability could allow authenticated attackers to elevate user privileges. This issue affects Operations Bridge Manager: through 2021.05; Operations Bridge Suite (Containerized): through 2021.05; UCMDB ( Classic and Containerized): through 2021.05.CVE-2024-9432opentext™verticaEPSS score0.10%
Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data.
The vulnerability could read Vertica agent plaintext apikey.This issue affects Vertica versions: 23.X, 24.X, 25.X.