Skip to content
OpenAdvisories

Vendor

OpenText

204 known vulnerabilities.

Products

Brava! Desktop 36 iManager 21 eDirectory 6 NetIQ Advance Authentication 6 Flipper 6 AppBuilder 5 Operations Bridge Manager 5 OpenText Application Automation Tools 5 Vertica 5 ArcSight Platform 5 Filr 4 ArcSight Enterprise Security Manager 4 NetIQ Access Manager 3 Exceed Turbo X 3 Access Manager 3 Service Management Automation X (SMAX) 3 Operations Agent 3 Asset Management X (AMX) 3 OpenText Content Management 3 Web Site Management Server 3 Opentext Directory Services 3 Directory Services 3 ArcSight Intelligence 3 Privileged Access Manager 3 OpenText Directory Services (OTDS) 3 Secure Content Manager 3 Service Manager 2 Dimensions RM 2 ALM Octane. 2 OpenText Enterprise Security Manager 2 PVCS Version Manager 2 Performance Center 2 Advance Authentication 2 XM Fax 2 ArcSight Management Center 2 Advanced Authentication Server 2 Network Node Manager i (NNMi) 2 Advanced Authentication 2 Self Service Password Reset 2 Operations Bridge Reporter 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-112256

    Logon bypass (trust of attacker-controlled completed-methods list)

    Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8…

    OpenText Advanced Authentication Server
  • Critical 9.3
    CVE-2026-75120

    Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

    The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allo…

    OpenText Endpoint Forensics & Response Endpoint Security Endpoint Investigator
  • Critical 9.3
    CVE-2025-15610

    The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be explo…

    OpenText RightFax
  • Critical 9.5
    CVE-2025-15579

    An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.

    Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.  The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.16,…

    OpenText Directory Services
  • Critical 9.4
    CVE-2024-10865

    Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication

    Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5.

    OpenText Advance Authentication
  • Critical 9.4
    CVE-2025-3476

    Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege …

    OpenText Operations Bridge Manager
  • Critical 10.0
    CVE-2024-12799

    Insufficiently Protected Credentials

    Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information vi…

    OpenText Identity Manager Advanced Edition
  • Critical 9.0
    CVE-2019-17082

    Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on…

    OpenText AccuRev
  • Critical 9.8
    CVE-2024-1148

    Weak Access Control - Arbitrary file upload

    Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files.

    OpenText PVCS Version Manager
  • Critical 9.8
    CVE-2024-1147

    Weak Access Control - Arbitrary file download

    Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and download of files.

    OpenText PVCS Version Manager
  • Critical 9.8
    CVE-2024-1811

    OpenText ArcSight Platform Remote Vulnerability

    A potential vulnerability has been identified in OpenText ArcSight Platform. The vulnerability could be remotely exploited.

    OpenText ArcSight Platform
  • Critical 9.8
    CVE-2023-4501

    Authentication bypass in OpenText (Micro Focus) Enterprise Server

    User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates…

    OpenText Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server