4.8Mittel
DOM-based XSS vulnerability in OpenText™ Documentum Webtop
OpenText™ Documentum Webtop
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS
OpenText™ Schwachstellen (CVE)
Für OpenText™ veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
Vertica 4Operations Bridge Manager 3Directory Services 3Web Site Management Server 3Service Manager 2XM Fax 2Operations Bridge Suite (Containerized) 1Solutions Business Manager (SBM) 1Carbonite Safe Server Backup 1uCMDB 1Content Management (Extended ECM) 1UCMDB ( Classic and Containerized) 1Digital Asset Management. 1Documentum Webtop 1Filr 1ZENworks Service Desk 1GroupWise 1
7.4Hoch
XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
OpenText™ ZENworks Service Desk
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unaut…
5.1Mittel
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console applicati…
5.1Mittel
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console applicati…
5.1Mittel
Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing. The vulnerability could lead to Password Brute Forcing in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 …
8.3Hoch
Improper access control vulnerability has been discovered in OpenText™ Filr.
OpenText™ Filr
Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2.
8.6Hoch
RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.
OpenText™ Carbonite Safe Server Backup
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects…
5.3Mittel
Content spoofing vulnerability discovered in OpenText™ Directory Services
OpenText™ Directory Services
User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning. The vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially mis…
7.5Hoch
Stored-XSS vulnerability discovered in OpenText WSM Management Server.
OpenText™ Web Site Management Server
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerability could execute malicious scripts on the client side when the download query p…
5.9Mittel
Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.
OpenText™ Web Site Management Server
Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggerin…
7.0Hoch
Reflected Cross-Site Scripting discovered in OpenText WSM Management Server.
OpenText™ Web Site Management Server
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerability could allow injecting malicious JavaScript inside URL parameters that was…
7.1Hoch
Path Traversal vulnerability have been discovered in OpenText™ XM Fax.
OpenText™ XM Fax
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal. The vulnerability could allow an attacker to arbitrarily disclose content of files on the local filesystem. This issue af…
5.3Mittel
SSRF vulnerability have been discovered in OpenText™ XM Fax
OpenText™ XM Fax
Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2.
9.5Kritisch
An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.
OpenText™ Directory Services
Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.1…
6.9Mittel
Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data. The vulnerability could read Vertica agent plaintext apikey.This issue affects Vertica versions: 23.X, 24.X, 25.X.
2.3Niedrig
Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB
OpenText™ uCMDB
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scr…
6.3Mittel
Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4
OpenText™ Directory Services
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.
1.8Niedrig
Incorrect Authorization vulnerability affects OpenText™ GroupWise
OpenText™ GroupWise
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7…
6.7Mittel
Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.
OpenText™ Operations Bridge Manager
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.
9.4Kritisch
OpenText™ Operations Bridge Manager
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4.
2.1Niedrig
SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.
OpenText™ Digital Asset Management.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This is…
8.7Hoch
Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.
OpenText™ Operations Bridge Manager; OpenText™ Operations Bridge Suite (Containerized); OpenText™ UCMDB ( Classic and Containerized)
Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation. The vulnerability could allow authenticated a…
2.1Niedrig
vulnerability has been discovered in OpenText™ Service Manager.
OpenText™ Service Manager
Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager. The vulnerability could reveal sensitive information retained by the browser. This issue affects Service Manager: 9.70, 9.71, 9.72, 9.80.
7.3Hoch
Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager.
OpenText™ Service Manager
Unquoted Search Path or Element vulnerability in OpenText™ Service Manager. The vulnerability could allow a user to gain SYSTEM privileges through Privilege Escalation. This issue affects Service Manager: 9.70, 9.71, 9.72.
5.4Mittel
A remote code vulnerability has been discovered in OpenText™ Content Management.
OpenText™ Content Management (Extended ECM)
Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection. A bad actor with the required OpenText Content Management privileges (not root) could expose the vulnerability to carry o…