Browse CVEs

MEDIUM 6.1 CVE-2026-3278 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Si… Zenworks Service Desk Mitigation only Fix from $1,6002026-03-18 HIGH 7.5 CVE-2025-12455 Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulnerability could lead to Password Brute Fo… Vertica after 12.0.4-34 Fix from $1,9502026-03-13 MEDIUM 6.1 CVE-2025-12453 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vu… Vertica 25.4.0-0+ Fix from $1,6002026-03-13 MEDIUM 6.1 CVE-2025-12454 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vu… Vertica 25.2.0+ Fix from $1,6002026-03-13 CRITICAL 9.8 CVE-2026-3266 Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF t… Filr 25.1.3+ Fix from $2,3002026-03-03 HIGH 7.5 CVE-2025-8054 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal.  The vulnera… Xm Fax Mitigation only Fix from $1,9502026-02-19 MEDIUM 5.4 CVE-2025-13672 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server all… Web Site Management Server No fix yet Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2025-9208 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server all… Web Site Management Server after 16.8.1 Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2025-8055 Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.  The vulnerability could allow an attacker … Xm Fax Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-1658 User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.  The vulnerabili… Directory Services after 25.2 Fix from $1,6002026-02-19 MEDIUM 6.5 CVE-2025-13671 Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could ma… Web Site Management Server No fix yet Fix from $1,6002026-02-19 MEDIUM 6.5 CVE-2025-8050 External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal.  The vulnerability could allow a user to access files… Flipper Mitigation only Fix from $1,6002025-10-21 CRITICAL 9.1 CVE-2025-8053 Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels.… Flipper Mitigation only Fix from $2,3002025-10-20 HIGH 8.8 CVE-2025-8049 Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels.… Flipper Mitigation only Fix from $1,9502025-10-20 HIGH 8.8 CVE-2025-8052 SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the datab… Flipper Mitigation only Fix from $1,9502025-10-20 MEDIUM 6.5 CVE-2025-8048 External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a store… Flipper Mitigation only Fix from $1,6002025-10-20 MEDIUM 6.5 CVE-2025-8051 Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.  The vulnerability could allow a user to access files hosted on the… Flipper Mitigation only Fix from $1,6002025-10-20 MEDIUM 5.5 CVE-2021-22518 A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all… Identity Manager Azuread Driver 5.1.4.0+ Fix from $1,6002024-09-12 HIGH 7.5 CVE-2023-7260 Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily acce… Cx E Voice after 22.4 Fix from $1,9502024-08-22 CRITICAL 9.8 CVE-2023-7249 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Trav… Directory Services 24.1+ Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-6359 Privilege escalation vulnerability identified in OpenText ArcSight Intelligence. Arcsight Intelligence 6.4.13+ Fix from $2,3002024-08-06 HIGH 8.8 CVE-2024-6357 Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence. Arcsight Intelligence 6.4.13+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6358 Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence. Arcsight Intelligence 6.4.13+ Fix from $1,9502024-08-06 MEDIUM 5.4 CVE-2024-6361 Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4.… Alm Octane 23.4+ Fix from $1,6002024-08-05 MEDIUM 5.4 CVE-2024-4187 Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to no… Filr Mitigation only Fix from $1,6002024-07-31 CRITICAL 9.8 CVE-2023-7248 Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulnerability would affect one of V… Vertica 11.1.1-25 / 12.0.4-19+ Fix from $2,3002024-03-15 CRITICAL 9.8 CVE-2023-38535 Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromis… Exceed Turbox Mitigation only Fix from $2,3002024-03-13 HIGH 7.5 CVE-2023-38534 Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of r… Exceed Turbox Mitigation only Fix from $1,9502024-03-13 MEDIUM 6.1 CVE-2023-38536 HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting.   Exceed Turbox Mitigation only Fix from $1,6002024-03-13 HIGH 7.5 CVE-2020-11862 Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Floo… Netiq Privileged Account Manager 3.7.0.2+ Fix from $1,9502024-03-13