5.3Medium
CVE-2026-1658Content spoofing vulnerability discovered in OpenText™ Directory Services
Description
User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning. The vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially misleading users. This issue affects Directory Services: from 20.4.1 through 25.2.
Weakness (CWE):
CWE-451
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| opentext | directory services | 20.4.1 – ≤ 25.2 | |
| OpenText™ | Directory Services | 20.4.1 – ≤ 25.2 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:opentext:directory_services:*:*:*:*:*:*:*:*≥ 20.4.1 ≤ 25.2