Opentext vulnerabilities
203 CVEs and advisories name Opentext as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-10248XSS vulnerability in OpenText Filr
- CVE-2026-18159A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking.
- CVE-2026-76580Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services…
- CVE-2026-19134A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering.
- CVE-2026-1339Open redirect vulnerability - UCMDB/Operations Bridge Manager
- CVE-2026-112256Logon bypass (trust of attacker-controlled completed-methods list)
- CVE-2026-112255Endpoint credential minting (insecure default allow-list)
- CVE-2026-75120Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents
- CVE-2025-15591Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management
- CVE-2026-12559Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application
- CVE-2025-3271DOM-based XSS vulnerability in OpenText™ Documentum Webtop
- CVE-2026-13202HTML Injection in OTDS Swagger UI
- CVE-2026-11877Missing Authorization Vulnerability in OpenText Access Manager
- CVE-2026-11878Reflected Cross-Site Scripting vulnerability in OpenText Access Manager
- CVE-2025-15610The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service i
- CVE-2026-2123Privilege escalation vulnerability in Operations Agent
- CVE-2024-11604Insertion of Sensitive Information into Log File
- CVE-2025-13478Cache Misconfiguration Leading to Cross-User Data Exposure
- CVE-2026-3278XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
- CVE-2025-12453Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
- CVE-2025-12454Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
- CVE-2025-12455Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.
- CVE-2026-3266Improper access control vulnerability has been discovered in OpenText™ Filr.
- CVE-2025-9120RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.
- CVE-2026-1658Content spoofing vulnerability discovered in OpenText™ Directory Services
- CVE-2025-9208Stored-XSS vulnerability discovered in OpenText WSM Management Server.
- CVE-2025-13671Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.
- CVE-2025-13672Reflected Cross-Site Scripting discovered in OpenText WSM Management Server.
- CVE-2025-8054Path Traversal vulnerability have been discovered in OpenText™ XM Fax.
- CVE-2025-8055SSRF vulnerability have been discovered in OpenText™ XM Fax