# cve.now: Opentext

The newest entries naming Opentext as an affected vendor (up to 200), of 203 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-10248](https://cve.now/CVE-2025-10248.md): XSS vulnerability in OpenText Filr (CVSS 7.2)
- [CVE-2026-18159](https://cve.now/CVE-2026-18159.md): A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. (CVSS 5.3)
- [CVE-2026-76580](https://cve.now/CVE-2026-76580.md): Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services… (CVSS 6.3)
- [CVE-2026-19134](https://cve.now/CVE-2026-19134.md): A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. (CVSS 7.1)
- [CVE-2026-1339](https://cve.now/CVE-2026-1339.md): Open redirect vulnerability - UCMDB/Operations Bridge Manager (CVSS 5.1)
- [CVE-2026-112256](https://cve.now/CVE-2026-112256.md): Logon bypass (trust of attacker-controlled completed-methods list) (CVSS 9.2)
- [CVE-2026-112255](https://cve.now/CVE-2026-112255.md): Endpoint credential minting (insecure default allow-list) (CVSS 2.9)
- [CVE-2026-75120](https://cve.now/CVE-2026-75120.md): Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents (CVSS 9.3)
- [CVE-2025-15591](https://cve.now/CVE-2025-15591.md): Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management (CVSS 5.3)
- [CVE-2026-12559](https://cve.now/CVE-2026-12559.md): Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application (CVSS 7.3)
- [CVE-2025-3271](https://cve.now/CVE-2025-3271.md): DOM-based XSS vulnerability in OpenText™ Documentum Webtop (CVSS 4.8)
- [CVE-2026-13202](https://cve.now/CVE-2026-13202.md): HTML Injection in OTDS Swagger UI (CVSS 7.3)
- [CVE-2026-11877](https://cve.now/CVE-2026-11877.md): Missing Authorization Vulnerability in OpenText Access Manager (CVSS 6.3)
- [CVE-2026-11878](https://cve.now/CVE-2026-11878.md): Reflected Cross-Site Scripting vulnerability in OpenText Access Manager (CVSS 8.2)
- [CVE-2025-15610](https://cve.now/CVE-2025-15610.md): The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service i (CVSS 9.3)
- [CVE-2026-2123](https://cve.now/CVE-2026-2123.md): Privilege escalation vulnerability in Operations Agent (CVSS 8.6)
- [CVE-2024-11604](https://cve.now/CVE-2024-11604.md): Insertion of Sensitive Information into Log File (CVSS 7.3)
- [CVE-2025-13478](https://cve.now/CVE-2025-13478.md): Cache Misconfiguration Leading to Cross-User Data Exposure (CVSS 8.4)
- [CVE-2026-3278](https://cve.now/CVE-2026-3278.md): XSS Vulnerability discovered in OpenText™ ZENworks Service Desk. (CVSS 7.4)
- [CVE-2025-12453](https://cve.now/CVE-2025-12453.md): Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. (CVSS 5.1)
- [CVE-2025-12454](https://cve.now/CVE-2025-12454.md): Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. (CVSS 5.1)
- [CVE-2025-12455](https://cve.now/CVE-2025-12455.md): Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. (CVSS 5.1)
- [CVE-2026-3266](https://cve.now/CVE-2026-3266.md): Improper access control vulnerability has been discovered in OpenText™ Filr. (CVSS 8.3)
- [CVE-2025-9120](https://cve.now/CVE-2025-9120.md): RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup. (CVSS 8.6)
- [CVE-2026-1658](https://cve.now/CVE-2026-1658.md): Content spoofing vulnerability discovered in OpenText™ Directory Services (CVSS 5.3)
- [CVE-2025-9208](https://cve.now/CVE-2025-9208.md): Stored-XSS vulnerability discovered in OpenText WSM Management Server. (CVSS 7.5)
- [CVE-2025-13671](https://cve.now/CVE-2025-13671.md): Cross Site request forgery vulnerability discovered in OpenText WSM Management Server. (CVSS 5.9)
- [CVE-2025-13672](https://cve.now/CVE-2025-13672.md): Reflected Cross-Site Scripting discovered in OpenText WSM Management Server. (CVSS 7.0)
- [CVE-2025-8054](https://cve.now/CVE-2025-8054.md): Path Traversal vulnerability have been discovered in OpenText™ XM Fax. (CVSS 7.1)
- [CVE-2025-8055](https://cve.now/CVE-2025-8055.md): SSRF vulnerability have been discovered in OpenText™ XM Fax (CVSS 5.3)
- [CVE-2025-15579](https://cve.now/CVE-2025-15579.md): An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services. (CVSS 9.5)
- [CVE-2024-9432](https://cve.now/CVE-2024-9432.md): Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica. (CVSS 6.9)
- [CVE-2025-11884](https://cve.now/CVE-2025-11884.md): Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB (CVSS 2.3)
- [CVE-2025-8050](https://cve.now/CVE-2025-8050.md): External Control of File vulnerability has been discovered in opentext Flipper. (CVSS 5.3)
- [CVE-2025-8052](https://cve.now/CVE-2025-8052.md): HQL Injection vulnerability has been discovered in Opentext Flipper. (CVSS 1.0)
- [CVE-2025-8048](https://cve.now/CVE-2025-8048.md): External Control of File path vulnerability has been discovered on Openext Flipper. (CVSS 5.3)
- [CVE-2025-8049](https://cve.now/CVE-2025-8049.md): Insufficient Access Control vulnerability has been discovered in OpenText Flipper. (CVSS 2.3)
- [CVE-2025-8051](https://cve.now/CVE-2025-8051.md): Path traversal validation vulnerability has been discovered in opentext Flipper. (CVSS 5.3)
- [CVE-2025-8053](https://cve.now/CVE-2025-8053.md): Insufficient access control vulnerability has been discovered in Opentext Flipper. (CVSS 1.0)
- [CVE-2025-8716](https://cve.now/CVE-2025-8716.md): Cache exploitation vulnerability (CVSS 5.8)
- [CVE-2025-5808](https://cve.now/CVE-2025-5808.md): Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset (CVSS 7.3)
- [CVE-2025-3478](https://cve.now/CVE-2025-3478.md): OpenText Enterprise Security Manager Stored XSS (CVSS 8.5)
- [CVE-2025-8997](https://cve.now/CVE-2025-8997.md): OpenText Enterprise Security Manager Information Exposure (CVSS 5.7)
- [CVE-2025-8616](https://cve.now/CVE-2025-8616.md): Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication (CVSS 6.1)
- [CVE-2024-7650](https://cve.now/CVE-2024-7650.md): Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4 (CVSS 6.3)
- [CVE-2025-0885](https://cve.now/CVE-2025-0885.md): Incorrect Authorization vulnerability affects OpenText™ GroupWise (CVSS 1.8)
- [CVE-2025-2236](https://cve.now/CVE-2025-2236.md): Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication. (CVSS 2.1)
- [CVE-2024-10865](https://cve.now/CVE-2024-10865.md): Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication (CVSS 9.4)
- [CVE-2024-10864](https://cve.now/CVE-2024-10864.md): SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication. (CVSS 7.5)
- [CVE-2025-3272](https://cve.now/CVE-2025-3272.md): Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager. (CVSS 6.7)
- [CVE-2025-3476](https://cve.now/CVE-2025-3476.md): Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. (CVSS 9.4)
- [CVE-2024-12706](https://cve.now/CVE-2024-12706.md): SQL Injection vulnerability discovered in OpenText™ Digital Asset Management. (CVSS 2.1)
- [CVE-2024-12543](https://cve.now/CVE-2024-12543.md): A user enumeration and subsequent data integrity vulnerability affecting barcode functionality (CVSS 5.9)
- [CVE-2024-12863](https://cve.now/CVE-2024-12863.md): Stored XSS in Discussions functionality (CVSS 5.6)
- [CVE-2025-2517](https://cve.now/CVE-2025-2517.md): Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager (CVSS 2.3)
- [CVE-2024-12862](https://cve.now/CVE-2024-12862.md): REST API allows users without permissions to remove external collaborators (CVSS 5.5)
- [CVE-2024-12530](https://cve.now/CVE-2024-12530.md): Insecure Dynamic-Link Library (DLL) Load vulnerability (CVSS 7.0)
- [CVE-2022-26323](https://cve.now/CVE-2022-26323.md): Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product. (CVSS 8.7)
- [CVE-2025-0883](https://cve.now/CVE-2025-0883.md): vulnerability has been discovered in OpenText™ Service Manager. (CVSS 2.1)
- [CVE-2025-0884](https://cve.now/CVE-2025-0884.md): Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager. (CVSS 7.3)
- [CVE-2024-12799](https://cve.now/CVE-2024-12799.md): Insufficiently Protected Credentials (CVSS 10.0)
- [CVE-2024-8125](https://cve.now/CVE-2024-8125.md): A remote code vulnerability has been discovered in OpenText™ Content Management. (CVSS 5.4)
- [CVE-2024-7085](https://cve.now/CVE-2024-7085.md): Exposure of private information vulnerability has been discovered in OpenText™ Solutions Business Manager (SBM). (CVSS 8.2)
- [CVE-2024-12111](https://cve.now/CVE-2024-12111.md): Potential LDAP injection vulnerability in OpenText Privileged Access Manager (CVSS 8.0)
- [CVE-2021-22501](https://cve.now/CVE-2021-22501.md): Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. (CVSS 5.3)
- [CVE-2019-17082](https://cve.now/CVE-2019-17082.md): Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. (CVSS 9.0)
- [CVE-2024-10863](https://cve.now/CVE-2024-10863.md): Client-side audit exclusion vulnerability (CVSS 5.1)
- [CVE-2021-38116](https://cve.now/CVE-2021-38116.md): Possible Command injection Vulnerability in OpenText iManager (CVSS 8.8)
- [CVE-2021-38117](https://cve.now/CVE-2021-38117.md): Possible Remote Code Execution Vulnerability OpenText iManager (CVSS 8.8)
- [CVE-2021-38118](https://cve.now/CVE-2021-38118.md): Possible Local Privilege Escalation Vulnerability in OpenText iManager (CVSS 5.5)
- [CVE-2021-38119](https://cve.now/CVE-2021-38119.md): Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager (CVSS 6.1)
- [CVE-2021-38134](https://cve.now/CVE-2021-38134.md): Possible Reflected and Stored XSS in OpenText iManager (CVSS 6.1)
- [CVE-2021-38135](https://cve.now/CVE-2021-38135.md): Possible External service interaction Vulnerability in OpenText iManager (CVSS 8.6)
- [CVE-2022-26324](https://cve.now/CVE-2022-26324.md): Possible XSS in iManager URL for access Component (CVSS 7.6)
- [CVE-2023-24466](https://cve.now/CVE-2023-24466.md): Possible XML External Entity Injection in OpenText iManager (CVSS 7.5)
- [CVE-2023-24467](https://cve.now/CVE-2023-24467.md): Possible Command Injection in OpenText iManager (CVSS 8.8)
- [CVE-2024-10923](https://cve.now/CVE-2024-10923.md): Improper Neutralization vulnerability has been discovered in OpenText™ ALM Octane Management. (CVSS 8.6)
- [CVE-2024-9841](https://cve.now/CVE-2024-9841.md): OpenText ArcSight Management Center and ArcSight Platform Stored XSS (CVSS 7.0)
- [CVE-2020-11859](https://cve.now/CVE-2020-11859.md): Potential Cross Site Scripting vulnerability in OpenText iManager (CVSS 7.6)
- [CVE-2024-5532](https://cve.now/CVE-2024-5532.md): A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA). (CVSS 1.8)
- [CVE-2024-4692](https://cve.now/CVE-2024-4692.md): Multiple missing permission checks (CVSS 1.8)
- [CVE-2024-4690](https://cve.now/CVE-2024-4690.md): Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools (CVSS 5.1)
- [CVE-2024-4211](https://cve.now/CVE-2024-4211.md): Multiple missing permission checks (CVSS 1.8)
- [CVE-2024-4189](https://cve.now/CVE-2024-4189.md): Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools (CVSS 5.9)
- [CVE-2024-4184](https://cve.now/CVE-2024-4184.md): Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools (CVSS 5.9)
- [CVE-2023-32266](https://cve.now/CVE-2023-32266.md): Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center. (CVSS 5.3)
- [CVE-2024-6360](https://cve.now/CVE-2024-6360.md): Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica. (CVSS 6.9)
- [CVE-2021-22503](https://cve.now/CVE-2021-22503.md): Improper Neutralization of Input During Web Page Generation Vulnerability (CVSS 5.4)
- [CVE-2021-22518](https://cve.now/CVE-2021-22518.md): Sensitive Information logging in NetIQ Identity Manager Driver (CVSS 5.8)
- [CVE-2021-22532](https://cve.now/CVE-2021-22532.md): Possible NLDAP Denial of Service attack Vulnerability (CVSS 7.6)
- [CVE-2021-22533](https://cve.now/CVE-2021-22533.md): Possible Insertion of Sensitive Information into Log File Vulnerability (CVSS 6.5)
- [CVE-2021-38131](https://cve.now/CVE-2021-38131.md): Cross-Site Scripting (XSS) Vulnerability (CVSS 5.4)
- [CVE-2021-38132](https://cve.now/CVE-2021-38132.md): Possible External service interaction Vulnerability (CVSS 5.3)
- [CVE-2021-38133](https://cve.now/CVE-2021-38133.md): Possible Improper authentication Vulnerability in OpenText eDirectory (CVSS 7.4)
- [CVE-2022-26322](https://cve.now/CVE-2022-26322.md): Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager (CVSS 4.9)
- [CVE-2021-22509](https://cve.now/CVE-2021-22509.md): Handling of sensitive data in process memory in NetIQ Advance Authentication (CVSS 8.1)
- [CVE-2021-22529](https://cve.now/CVE-2021-22529.md): Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication (CVSS 6.3)
- [CVE-2021-22530](https://cve.now/CVE-2021-22530.md): Improper account management vulnerability in NetIQ Advance Authentication (CVSS 8.2)
- [CVE-2021-38120](https://cve.now/CVE-2021-38120.md): Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication (CVSS 5.1)
- [CVE-2021-38121](https://cve.now/CVE-2021-38121.md): Weak communication protocol identified in Advance Authentication client application (CVSS 8.3)
- [CVE-2021-38122](https://cve.now/CVE-2021-38122.md): Cross-Site Scripting (XSS) in Advance Authentication (CVSS 6.2)
- [CVE-2024-4554](https://cve.now/CVE-2024-4554.md): Multiple xss vulnerability in NetIQ Access Manager (CVSS 7.3)
- [CVE-2024-4555](https://cve.now/CVE-2024-4555.md): User impersonation with MFA when configure in specific way (CVSS 7.7)
- [CVE-2024-4556](https://cve.now/CVE-2024-4556.md): Directory traversal vulnerability in NetIQ Access Manager (CVSS 5.7)
- [CVE-2024-7427](https://cve.now/CVE-2024-7427.md): Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi). (CVSS 4.8)
- [CVE-2024-7428](https://cve.now/CVE-2024-7428.md): Potential Open Redirect issues affect OpenText™ Network Node Manager i (NNMi). (CVSS 4.8)
- [CVE-2023-7260](https://cve.now/CVE-2023-7260.md): A path traversal vulnerability has been discovered in OpenText™ CX-E Voice. (CVSS 6.9)
- [CVE-2022-26327](https://cve.now/CVE-2022-26327.md): Stored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center (CVSS 5.1)
- [CVE-2022-26328](https://cve.now/CVE-2022-26328.md): User enumeration vulnerability has been discovered in OpenText™ Performance Center (CVSS 2.0)
- [CVE-2020-11847](https://cve.now/CVE-2020-11847.md): Vulnerability in sshrelay in privileged access manager provides full system access. (CVSS 8.2)
- [CVE-2020-11846](https://cve.now/CVE-2020-11846.md): Improper handling of token allows access to restricted resource in Privileged Access Manager (CVSS 8.7)
- [CVE-2020-11850](https://cve.now/CVE-2020-11850.md): Cross site scripting vulnerability in Self Service Password Reset (CVSS 7.3)
- [CVE-2023-7249](https://cve.now/CVE-2023-7249.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows (CVSS 6.3)
- [CVE-2024-6357](https://cve.now/CVE-2024-6357.md): Insecure Direct Object Reference vulnerability (CVSS 6.3)
- [CVE-2024-6359](https://cve.now/CVE-2024-6359.md): Privilege escalation vulnerability (CVSS 6.4)
- [CVE-2024-6358](https://cve.now/CVE-2024-6358.md): Incorrect Authorization vulnerability (CVSS 6.3)
- [CVE-2024-6361](https://cve.now/CVE-2024-6361.md): Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane product. (CVSS 7.3)
- [CVE-2024-4187](https://cve.now/CVE-2024-4187.md): Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites. (CVSS 2.1)
- [CVE-2024-4188](https://cve.now/CVE-2024-4188.md): Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation. (CVSS 7.1)
- [CVE-2024-7050](https://cve.now/CVE-2024-7050.md): Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Bypass in particular sce (CVSS 8.3)
- [CVE-2020-25836](https://cve.now/CVE-2020-25836.md): Potential information leakage resulting in unauthorized access (CVSS 6.3)
- [CVE-2024-4190](https://cve.now/CVE-2024-4190.md): OpenText ArcSight Logger Stored XSS (CVSS 8.4)
- [CVE-2020-11843](https://cve.now/CVE-2020-11843.md): Potential information leakage in administrator enabled debug mode (CVSS 6.5)
- [CVE-2024-4429](https://cve.now/CVE-2024-4429.md): Cross Site Request Forgery vulnerability in iManager (CVSS 5.4)
- [CVE-2024-3969](https://cve.now/CVE-2024-3969.md): XML External Entity injection vulnerability in iManager (CVSS 7.8)
- [CVE-2024-5201](https://cve.now/CVE-2024-5201.md): Dimensions RM - Privilege Escalation (CVSS 8.8)
- [CVE-2024-5202](https://cve.now/CVE-2024-5202.md): Dimensions RM - Arbitrary File Read (CVSS 7.7)
- [CVE-2024-2835](https://cve.now/CVE-2024-2835.md): OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS (CVSS 8.7)
- [CVE-2024-3482](https://cve.now/CVE-2024-3482.md): OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS (CVSS 8.7)
- [CVE-2021-22508](https://cve.now/CVE-2021-22508.md): Potential SQL injection in OpenText Operations Bridge Reporter (CVSS 7.2)
- [CVE-2024-3488](https://cve.now/CVE-2024-3488.md): File Upload vulnerability in unauthenticated session found in iManager. (CVSS 5.6)
- [CVE-2024-3487](https://cve.now/CVE-2024-3487.md): Broken Authentication vulnerability in iManager (CVSS 3.5)
- [CVE-2024-3486](https://cve.now/CVE-2024-3486.md): XML External Entity injection vulnerability in iManager (CVSS 7.8)
- [CVE-2024-3485](https://cve.now/CVE-2024-3485.md): Server-Side Request Forgery vulnerability in iManager (CVSS 5.3)
- [CVE-2024-3484](https://cve.now/CVE-2024-3484.md): Path Traversal vulnerability found in iManager (CVSS 5.7)
- [CVE-2024-3483](https://cve.now/CVE-2024-3483.md): Remote Code Execution vulnerability in the iManager (CVSS 7.8)
- [CVE-2024-3967](https://cve.now/CVE-2024-3967.md): Remote Code Execution vulnerability in the iManager (CVSS 7.6)
- [CVE-2024-3968](https://cve.now/CVE-2024-3968.md): Remote Code Execution vulnerability in the iManager (CVSS 7.8)
- [CVE-2024-3970](https://cve.now/CVE-2024-3970.md): Server-Side Request Forgery vulnerability in iManager (CVSS 5.3)
- [CVE-2023-7240](https://cve.now/CVE-2023-7240.md): Broken Access Control leading to SSRF in NetIQ Identity Console (CVSS 5.8)
- [CVE-2024-2834](https://cve.now/CVE-2024-2834.md): OpenText ArcSight Management Center and ArcSight Platform Stored XSS (CVSS 8.7)
- [CVE-2023-6400](https://cve.now/CVE-2023-6400.md): Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product. (CVSS 7.4)
- [CVE-2024-1973](https://cve.now/CVE-2024-1973.md): Elevation of privileges vulnerability (CVSS 8.5)
- [CVE-2024-1148](https://cve.now/CVE-2024-1148.md): Weak Access Control - Arbitrary file upload (CVSS 9.8)
- [CVE-2024-1147](https://cve.now/CVE-2024-1147.md): Weak Access Control - Arbitrary file download (CVSS 9.8)
- [CVE-2024-1811](https://cve.now/CVE-2024-1811.md): OpenText ArcSight Platform Remote Vulnerability (CVSS 9.8)
- [CVE-2023-32260](https://cve.now/CVE-2023-32260.md): A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products. (CVSS 6.5)
- [CVE-2023-32259](https://cve.now/CVE-2023-32259.md): Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products. (CVSS 6.5)
- [CVE-2023-7248](https://cve.now/CVE-2023-7248.md): OpenText Vertica Management console might be prone to bypass via crafted requests (CVSS 5.0)
- [CVE-2020-11862](https://cve.now/CVE-2020-11862.md): Insecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager (CVSS 8.6)
- [CVE-2023-38536](https://cve.now/CVE-2023-38536.md): HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. (CVSS 6.4)
- [CVE-2023-38535](https://cve.now/CVE-2023-38535.md): Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. (CVSS 4.7)
- [CVE-2023-38534](https://cve.now/CVE-2023-38534.md): Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. (CVSS 8.6)
- [CVE-2023-32264](https://cve.now/CVE-2023-32264.md): CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. (CVSS 5.8)
- [CVE-2024-0967](https://cve.now/CVE-2024-0967.md): OpenText / Micro Focus ArcSight Enterprise Security Manager Remote Vulnerability (CVSS 4.3)
- [CVE-2024-1470](https://cve.now/CVE-2024-1470.md): Elevation of Privilege attack on NetIQ Client login extension (CVSS 7.1)
- [CVE-2023-6123](https://cve.now/CVE-2023-6123.md): Improper Neutralization vulnerability affects OpenText ALM Octane. (CVSS 7.5)
- [CVE-2024-0622](https://cve.now/CVE-2024-0622.md): Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms. (CVSS 8.8)
- [CVE-2023-4554](https://cve.now/CVE-2023-4554.md): XML External Entity (XXE) Processing (CVSS 4.9)
- [CVE-2023-4553](https://cve.now/CVE-2023-4553.md): Unauthenticated Access to AppBuilder Configuration Files (CVSS 5.3)
- [CVE-2023-4552](https://cve.now/CVE-2023-4552.md): Java Database Connectivity (JDBC) URL Manipulation (CVSS 5.5)
- [CVE-2023-4551](https://cve.now/CVE-2023-4551.md): Command Injection via Task Scheduler (CVSS 7.2)
- [CVE-2023-4550](https://cve.now/CVE-2023-4550.md): Unauthenticated Arbitrary File Read (CVSS 7.5)
- [CVE-2023-32268](https://cve.now/CVE-2023-32268.md): Administrator equivalent Filr user can access proxy administrator credentials (CVSS 7.2)
- [CVE-2023-5913](https://cve.now/CVE-2023-5913.md): A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API. (CVSS 8.2)
- [CVE-2023-4964](https://cve.now/CVE-2023-4964.md): Potential open redirect vulnerability in opentext SMAX and AMX product. (CVSS 8.2)
- [CVE-2023-4501](https://cve.now/CVE-2023-4501.md): Authentication bypass in OpenText (Micro Focus) Enterprise Server (CVSS 9.8)
- [CVE-2021-31504](https://cve.now/CVE-2021-31504.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (p (CVSS 7.8)
- [CVE-2021-31503](https://cve.now/CVE-2021-31503.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (p (CVSS 7.8)
- [CVE-2021-31514](https://cve.now/CVE-2021-31514.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8)
- [CVE-2021-31513](https://cve.now/CVE-2021-31513.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8)
- [CVE-2021-31512](https://cve.now/CVE-2021-31512.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8)
- [CVE-2021-31511](https://cve.now/CVE-2021-31511.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8)
- [CVE-2021-31510](https://cve.now/CVE-2021-31510.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8)
- [CVE-2021-31509](https://cve.now/CVE-2021-31509.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31508](https://cve.now/CVE-2021-31508.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31507](https://cve.now/CVE-2021-31507.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31506](https://cve.now/CVE-2021-31506.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6 (CVSS 3.3)
- [CVE-2021-31502](https://cve.now/CVE-2021-31502.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. (CVSS 7.8)
- [CVE-2021-31501](https://cve.now/CVE-2021-31501.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 3.3)
- [CVE-2021-31500](https://cve.now/CVE-2021-31500.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31499](https://cve.now/CVE-2021-31499.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31498](https://cve.now/CVE-2021-31498.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 3.3)
- [CVE-2021-31497](https://cve.now/CVE-2021-31497.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31496](https://cve.now/CVE-2021-31496.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31495](https://cve.now/CVE-2021-31495.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31494](https://cve.now/CVE-2021-31494.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31493](https://cve.now/CVE-2021-31493.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31492](https://cve.now/CVE-2021-31492.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31491](https://cve.now/CVE-2021-31491.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31490](https://cve.now/CVE-2021-31490.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31489](https://cve.now/CVE-2021-31489.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31488](https://cve.now/CVE-2021-31488.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31487](https://cve.now/CVE-2021-31487.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31486](https://cve.now/CVE-2021-31486.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31485](https://cve.now/CVE-2021-31485.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31484](https://cve.now/CVE-2021-31484.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31483](https://cve.now/CVE-2021-31483.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31482](https://cve.now/CVE-2021-31482.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)
- [CVE-2021-31481](https://cve.now/CVE-2021-31481.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/opentext
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.