6.3Medium
CVE-2026-76580
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Cross-Site Scripting (XSS). This issue affects OpenText Directory Services (OTDS): from 25.1 through 26.2.
Weakness (CWE):
CWE-79
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| OpenText | OpenText Directory Services (OTDS) | 25.1 – ≤ 26.2, fixed 26.2.5, fixed 26.1.8, fixed 25.4.11, fixed 25.3.13 |