4.8Media
DOM-based XSS vulnerability in OpenText™ Documentum Webtop
OpenText™ Documentum Webtop
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS
Vulnerabilidades de OpenText™ (CVE)
Registros CVE publicados para OpenText™, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
Vertica 4Directory Services 3Web Site Management Server 3Operations Bridge Manager 3XM Fax 2Service Manager 2Digital Asset Management. 1Documentum Webtop 1Filr 1ZENworks Service Desk 1GroupWise 1Operations Bridge Suite (Containerized) 1Solutions Business Manager (SBM) 1Carbonite Safe Server Backup 1uCMDB 1Content Management (Extended ECM) 1UCMDB ( Classic and Containerized) 1
7.4Alta
XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
OpenText™ ZENworks Service Desk
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unaut…
5.1Media
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console applicati…
5.1Media
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS. The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console applicati…
5.1Media
Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing. The vulnerability could lead to Password Brute Forcing in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 …
8.3Alta
Improper access control vulnerability has been discovered in OpenText™ Filr.
OpenText™ Filr
Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2.
8.6Alta
RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.
OpenText™ Carbonite Safe Server Backup
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection. The vulnerability could be exploited through an open port, potentially allowing unauthorized access. This issue affects…
5.3Media
Content spoofing vulnerability discovered in OpenText™ Directory Services
OpenText™ Directory Services
User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning. The vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially mis…
7.5Alta
Stored-XSS vulnerability discovered in OpenText WSM Management Server.
OpenText™ Web Site Management Server
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerability could execute malicious scripts on the client side when the download query p…
5.9Media
Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.
OpenText™ Web Site Management Server
Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggerin…
7.0Alta
Reflected Cross-Site Scripting discovered in OpenText WSM Management Server.
OpenText™ Web Site Management Server
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerability could allow injecting malicious JavaScript inside URL parameters that was…
7.1Alta
Path Traversal vulnerability have been discovered in OpenText™ XM Fax.
OpenText™ XM Fax
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal. The vulnerability could allow an attacker to arbitrarily disclose content of files on the local filesystem. This issue af…
5.3Media
SSRF vulnerability have been discovered in OpenText™ XM Fax
OpenText™ XM Fax
Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2.
9.5Crítica
An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.
OpenText™ Directory Services
Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.1…
6.9Media
Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.
OpenText™ Vertica
Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data. The vulnerability could read Vertica agent plaintext apikey.This issue affects Vertica versions: 23.X, 24.X, 25.X.
2.3Baja
Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB
OpenText™ uCMDB
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scr…
6.3Media
Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4
OpenText™ Directory Services
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.
1.8Baja
Incorrect Authorization vulnerability affects OpenText™ GroupWise
OpenText™ GroupWise
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7…
6.7Media
Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.
OpenText™ Operations Bridge Manager
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.
9.4Crítica
OpenText™ Operations Bridge Manager
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4.
2.1Baja
SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.
OpenText™ Digital Asset Management.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This is…
8.7Alta
Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.
OpenText™ Operations Bridge Manager; OpenText™ Operations Bridge Suite (Containerized); OpenText™ UCMDB ( Classic and Containerized)
Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation. The vulnerability could allow authenticated a…
2.1Baja
vulnerability has been discovered in OpenText™ Service Manager.
OpenText™ Service Manager
Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager. The vulnerability could reveal sensitive information retained by the browser. This issue affects Service Manager: 9.70, 9.71, 9.72, 9.80.
7.3Alta
Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager.
OpenText™ Service Manager
Unquoted Search Path or Element vulnerability in OpenText™ Service Manager. The vulnerability could allow a user to gain SYSTEM privileges through Privilege Escalation. This issue affects Service Manager: 9.70, 9.71, 9.72.
5.4Media
A remote code vulnerability has been discovered in OpenText™ Content Management.
OpenText™ Content Management (Extended ECM)
Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection. A bad actor with the required OpenText Content Management privileges (not root) could expose the vulnerability to carry o…