1.8Low

CVE-2025-0885Incorrect Authorization vulnerability affects OpenText™ GroupWise

OpenText™ GroupWise Published: (1 year ago)

Description

Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.

Weakness (CWE): CWE-863

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
OpenText™ GroupWise 7 – ≤ 17.5, 23.4, 24.1, 24.2, 24.3, 24.4

References and patches