Skip to content
OpenAdvisories

Vendor

OpenText

203 known vulnerabilities.

Products

Brava! Desktop 36 iManager 21 eDirectory 6 NetIQ Advance Authentication 6 Flipper 6 AppBuilder 5 Operations Bridge Manager 5 OpenText Application Automation Tools 5 Vertica 5 ArcSight Platform 5 Filr 4 ArcSight Enterprise Security Manager 4 NetIQ Access Manager 3 Exceed Turbo X 3 Access Manager 3 Service Management Automation X (SMAX) 3 Operations Agent 3 Asset Management X (AMX) 3 OpenText Content Management 3 Web Site Management Server 3 Opentext Directory Services 3 Directory Services 3 ArcSight Intelligence 3 Privileged Access Manager 3 OpenText Directory Services (OTDS) 3 Secure Content Manager 3 Service Manager 2 Dimensions RM 2 ALM Octane. 2 OpenText Enterprise Security Manager 2 PVCS Version Manager 2 Performance Center 2 Advance Authentication 2 XM Fax 2 ArcSight Management Center 2 Advanced Authentication Server 2 Network Node Manager i (NNMi) 2 Advanced Authentication 2 Self Service Password Reset 2 Operations Bridge Reporter 1
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Low 2.9
    CVE-2026-112255

    Endpoint credential minting (insecure default allow-list)

    Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Excessive Allocation. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.x, from 6.5.0.0 through 6.5.0.x, and from…

    OpenText Advanced Authentication Server
  • Low 2.3
    CVE-2025-11884

    Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scr…

    OpenText uCMDB
  • Low 1.0
    CVE-2025-8052

    HQL Injection vulnerability has been discovered in Opentext Flipper.

    SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.…

    OpenText Flipper
  • Low 2.3
    CVE-2025-8049

    Insufficient Access Control vulnerability has been discovered in OpenText Flipper.

    Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue a…

    OpenText Flipper
  • Low 1.0
    CVE-2025-8053

    Insufficient access control vulnerability has been discovered in Opentext Flipper.

    Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privil…

    OpenText Flipper
  • Low 1.8
    CVE-2025-0885

    Incorrect Authorization vulnerability affects OpenText™ GroupWise

    Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7 t…

    OpenText GroupWise
  • Low 2.1
    CVE-2025-2236

    Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external se…

    OpenText Advanced Authentication
  • Low 2.1
    CVE-2024-12706

    SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue…

    OpenText Digital Asset Management.
  • Low 2.3
    CVE-2025-2517

    Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager

    Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.

    OpenText ArcSight Enterprise Security Manager
  • Low 2.1
    CVE-2025-0883

    vulnerability has been discovered in OpenText™ Service Manager.

    Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.  The vulnerability could reveal sensitive information retained by the browser. This issue affects Service Manager: 9.70, 9.71, 9.72, 9.80.

    OpenText Service Manager
  • Low 1.8
    CVE-2024-5532

    A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.  The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal stat…

    OpenText Operations Agent
  • Low 1.8
    CVE-2024-4692

    Multiple missing permission checks

    Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has …

    OpenText OpenText Application Automation Tools
  • Low 1.8
    CVE-2024-4211

    Multiple missing permission checks

    Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered…

    OpenText OpenText Application Automation Tools
  • Low 2.0
    CVE-2022-26328

    User enumeration vulnerability has been discovered in OpenText™ Performance Center

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on Windows allows Cross-Site Scripting (XSS).This issue affects Performance Center: 12.63.

    OpenText Performance Center
  • Low 2.1
    CVE-2024-4187

    Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.

    Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

    OpenText Filr
  • Low 3.5
    CVE-2024-3487

    Broken Authentication vulnerability in iManager

    Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker to manipulate certain parameters to bypass authentication.

    OpenText iManager
  • Low 3.3
    CVE-2021-31506

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brav…

    OpenText Brava! Desktop
  • Low 3.3
    CVE-2021-31501

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brav…

    OpenText Brava! Desktop
  • Low 3.3
    CVE-2021-31498

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brav…

    OpenText Brava! Desktop