Skip to content
OpenAdvisories

Vendor

OpenText

204 known vulnerabilities.

Products

Brava! Desktop 36 iManager 21 eDirectory 6 NetIQ Advance Authentication 6 Flipper 6 AppBuilder 5 Operations Bridge Manager 5 OpenText Application Automation Tools 5 Vertica 5 ArcSight Platform 5 Filr 4 ArcSight Enterprise Security Manager 4 NetIQ Access Manager 3 Exceed Turbo X 3 Access Manager 3 Service Management Automation X (SMAX) 3 Operations Agent 3 Asset Management X (AMX) 3 OpenText Content Management 3 Web Site Management Server 3 Opentext Directory Services 3 Directory Services 3 ArcSight Intelligence 3 Privileged Access Manager 3 OpenText Directory Services (OTDS) 3 Secure Content Manager 3 Service Manager 2 Dimensions RM 2 ALM Octane. 2 OpenText Enterprise Security Manager 2 PVCS Version Manager 2 Performance Center 2 Advance Authentication 2 XM Fax 2 ArcSight Management Center 2 Advanced Authentication Server 2 Network Node Manager i (NNMi) 2 Advanced Authentication 2 Self Service Password Reset 2 Operations Bridge Reporter 1
All Critical High Medium Low Exploited only Public exploit

101 results · Clear filters · Feed

  • High 7.3
    CVE-2020-11850

    Cross site scripting vulnerability in Self Service Password Reset

    Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6

    OpenText Self Service Password Reset
  • High 7.3
    CVE-2024-6361

    Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane product.

    Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulnerability could cause remote code execution attack.

    OpenText ALM Octane.
  • High 7.1
    CVE-2024-4188

    Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.

    Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This issue affects Documentum™ Server: from 16.7 through 23.4.

    OpenText Documentum™ Server
  • High 8.3
    CVE-2024-7050

    Improper Authentication vulnerability in OpenText OpenText Directory Services may allow Multi-factor Authentication Byp…

    OpenText Opentext Directory Services
  • High 8.1
    CVE-2024-4190

    OpenText ArcSight Logger Stored XSS

    Stored Cross-Site Scripting (XSS) vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited.

    OpenText ArcSight Logger
  • High 7.8
    CVE-2024-3969

    XML External Entity injection vulnerability in iManager

    XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload

    OpenText iManager
  • High 8.8
    CVE-2024-5201

    Dimensions RM - Privilege Escalation

    Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request

    OpenText Dimensions RM
  • High 7.7
    CVE-2024-5202

    Dimensions RM - Arbitrary File Read

    Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices

    OpenText Dimensions RM
  • High 8.7
    CVE-2024-2835

    OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

    A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.

    OpenText ArcSight Platform ArcSight Enterprise Security Manager
  • High 8.7
    CVE-2024-3482

    OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS

    A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited.

    OpenText ArcSight Platform ArcSight Enterprise Security Manager
  • High 7.2
    CVE-2021-22508

    Potential SQL injection in OpenText Operations Bridge Reporter

    A potential vulnerability has been identified for OpenText Operations Bridge Reporter. The vulnerability could be exploited to inject malicious SQL queries. An attack requires to be an authenticated administrator of OBR with network access to the OBR web appl…

    OpenText Operations Bridge Reporter
  • High 7.8
    CVE-2024-3486

    XML External Entity injection vulnerability in iManager

    XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to information disclosure and remote code execution.

    OpenText iManager
  • High 7.8
    CVE-2024-3483

    Remote Code Execution vulnerability in the iManager

    Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command injection and insecure deserialization issues.

    OpenText iManager
  • High 7.6
    CVE-2024-3967

    Remote Code Execution vulnerability in the iManager

    Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution unisng unsafe java object deserialization.

    OpenText iManager
  • High 7.8
    CVE-2024-3968

    Remote Code Execution vulnerability in the iManager

    Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger remote code execution using custom file upload task.

    OpenText iManager
  • High 8.7
    CVE-2024-2834

    OpenText ArcSight Management Center and ArcSight Platform Stored XSS

    A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.

    OpenText ArcSight Platform ArcSight Management Center
  • High 7.4
    CVE-2023-6400

    Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.

    Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management (ZCM) allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management (ZCM) versions: 2020 update 3, 23.3, and 23.4.

    OpenText ZENworks Configuration Management (ZCM)
  • High 8.5
    CVE-2024-1973

    Elevation of privileges vulnerability

    By leveraging the vulnerability, lower-privileged users of Content Manager can manipulate Content Manager clients to elevate privileges and perform unauthorized operations.

    OpenText Secure Content Manager
  • High 8.6
    CVE-2020-11862

    Insecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager

    Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2.

    OpenText NetIQ Privileged Account Manager
  • High 8.6
    CVE-2023-38534

    Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerabili…

    OpenText Exceed Turbo X
  • High 7.1
    CVE-2024-1470

    Elevation of Privilege attack on NetIQ Client login extension

    Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows allows Privilege Escalation, Code Injection.This issue only affects NetIQ Client Login Extension: 4.6.

    OpenText NetIQ Client Login Extension
  • High 7.5
    CVE-2023-6123

    Improper Neutralization vulnerability affects OpenText ALM Octane.

    Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack.

    OpenText ALM Octane.
  • High 8.8
    CVE-2024-0622

    Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.

    Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms. The vulnerability could allow local privilege escalation. 

    OpenText Operations Agent
  • High 7.2
    CVE-2023-4551

    Command Injection via Task Scheduler

    Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated u…

    OpenText AppBuilder
  • High 7.5
    CVE-2023-4550

    Unauthenticated Arbitrary File Read

    Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on…

    OpenText AppBuilder
  • High 7.2
    CVE-2023-32268

    Administrator equivalent Filr user can access proxy administrator credentials

    Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators.

    OpenText Filr
  • High 8.2
    CVE-2023-5913

    A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.

    Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

    OpenText Fortify ScanCentral DAST
  • High 8.2
    CVE-2023-4964

    Potential open redirect vulnerability in opentext SMAX and AMX product.

    Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11…

    OpenText Asset Management X (AMX) Service Management Automation X (SMAX)
  • High 7.8
    CVE-2021-31504

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31503

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31514

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31513

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31512

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31511

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31510

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31509

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31508

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31507

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31502

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop
  • High 7.8
    CVE-2021-31500

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Deskt…

    OpenText Brava! Desktop