Skip to content
OpenAdvisories

Vendor

OpenText

204 known vulnerabilities.

Products

Brava! Desktop 36 iManager 21 eDirectory 6 NetIQ Advance Authentication 6 Flipper 6 AppBuilder 5 Operations Bridge Manager 5 OpenText Application Automation Tools 5 Vertica 5 ArcSight Platform 5 Filr 4 ArcSight Enterprise Security Manager 4 NetIQ Access Manager 3 Exceed Turbo X 3 Access Manager 3 Service Management Automation X (SMAX) 3 Operations Agent 3 Asset Management X (AMX) 3 OpenText Content Management 3 Web Site Management Server 3 Opentext Directory Services 3 Directory Services 3 ArcSight Intelligence 3 Privileged Access Manager 3 OpenText Directory Services (OTDS) 3 Secure Content Manager 3 Service Manager 2 Dimensions RM 2 ALM Octane. 2 OpenText Enterprise Security Manager 2 PVCS Version Manager 2 Performance Center 2 Advance Authentication 2 XM Fax 2 ArcSight Management Center 2 Advanced Authentication Server 2 Network Node Manager i (NNMi) 2 Advanced Authentication 2 Self Service Password Reset 2 Operations Bridge Reporter 1
All Critical High Medium Low Exploited only Public exploit

72 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-38132

    Possible External service interaction Vulnerability

    Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000.

    OpenText eDirectory
  • Medium 4.9
    CVE-2022-26322

    Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager

    Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. This impact version before 1.1.2.0200.

    OpenText Identity Manager REST Driver 1.1.2.0200
  • Medium 6.3
    CVE-2021-22529

    Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication

    A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information. This issue affects NetIQ Advance Authentication version before 6.3.5.1

    OpenText NetIQ Advance Authentication
  • Medium 5.1
    CVE-2021-38120

    Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication

    A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authentication version befor…

    OpenText NetIQ Advance Authentication
  • Medium 6.2
    CVE-2021-38122

    Cross-Site Scripting (XSS) in Advance Authentication

    A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1

    OpenText NetIQ Advance Authentication
  • Medium 5.7
    CVE-2024-4556

    Directory traversal vulnerability in NetIQ Access Manager

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1.

    OpenText NetIQ Access Manager
  • Medium 4.8
    CVE-2024-7427

    Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi).

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Network Node Manager i (NNMi) could allow Cross-Site Scripting (XSS).This issue affects Network Node Manager i (NNMi): 2022.11, 2023.05, 23.…

    OpenText Network Node Manager i (NNMi)
  • Medium 4.8
    CVE-2024-7428

    Potential Open Redirect issues affect OpenText™ Network Node Manager i (NNMi).

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in OpenText™ Network Node Manager i (NNMi) allows URL Redirector Abuse.This issue affects Network Node Manager i (NNMi): 2022.11, 2023.05, 23.4, 24.2.

    OpenText Network Node Manager i (NNMi)
  • Medium 6.9
    CVE-2023-7260

    A path traversal vulnerability has been discovered in OpenText™ CX-E Voice.

    Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system.

    OpenText CX-E Voice
  • Medium 5.1
    CVE-2022-26327

    Stored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63.

    OpenText Performance Center
  • Medium 6.3
    CVE-2023-7249

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Direc…

    OpenText Opentext Directory Services
  • Medium 6.3
    CVE-2024-6357

    Insecure Direct Object Reference vulnerability

    Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.

    OpenText ArcSight Intelligence
  • Medium 6.4
    CVE-2024-6359

    Privilege escalation vulnerability

    Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.

    OpenText ArcSight Intelligence
  • Medium 6.3
    CVE-2024-6358

    Incorrect Authorization vulnerability

    Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.

    OpenText ArcSight Intelligence
  • Medium 6.3
    CVE-2020-25836

    Potential information leakage resulting in unauthorized access

    Exposure of Sensitive Information to an Unauthorized Access vulnerability in OpenText NetIQ Directory and Resource Administrator. This issue affects NetIQ Directory and Resource Administrator versions prior to 10.0.2 and prior to 9.2.1 Patch 10.

    OpenText NetIQ Directory and Resource Administrator
  • Medium 6.5
    CVE-2020-11843

    Potential information leakage in administrator enabled debug mode

    This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before

    OpenText NetIQ Access Manager
  • Medium 5.4
    CVE-2024-4429

    Cross Site Request Forgery vulnerability in iManager

    Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information disclosure.

    OpenText iManager
  • Medium 5.6
    CVE-2024-3488

    File Upload vulnerability in unauthenticated session found in iManager.

    File Upload vulnerability in unauthenticated session found in OpenText™ iManager 3.2.6.0200. The vulnerability could allow ant attacker to upload a file without authentication.

    OpenText iManager
  • Medium 5.3
    CVE-2024-3485

    Server-Side Request Forgery vulnerability in iManager

    Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure.

    OpenText iManager
  • Medium 5.7
    CVE-2024-3484

    Path Traversal vulnerability found in iManager

    Path Traversal found in OpenText™ iManager 3.2.6.0200. This can lead to privilege escalation or file disclosure.

    OpenText iManager
  • Medium 5.3
    CVE-2024-3970

    Server-Side Request Forgery vulnerability in iManager

    Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senstive information disclosure by directory traversal.

    OpenText iManager
  • Medium 5.8
    CVE-2023-7240

    Broken Access Control leading to SSRF in NetIQ Identity Console

     An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server (Server IP/DNS field) and is triggering co…

    OpenText NetIQ Identity Console
  • Medium 6.5
    CVE-2023-32260

    A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.

    Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects…

    OpenText Asset Management X (AMX) Service Management Automation X (SMAX) Hybrid Cloud Management X (HCMX)
  • Medium 6.5
    CVE-2023-32259

    Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.

    Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Auto…

    OpenText Service Management Automation X (SMAX) Asset Management X (AMX)
  • Medium 5.0
    CVE-2023-7248

    OpenText Vertica Management console might be prone to bypass via crafted requests

    Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impact…

    OpenText Vertica Management Console
  • Medium 6.4
    CVE-2023-38536

    HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scrip…

    OpenText Exceed Turbo X
  • Medium 4.7
    CVE-2023-38535

    Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The…

    OpenText Exceed Turbo X
  • Medium 5.8
    CVE-2023-32264

    CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upl…

    OpenText Documentum D2
  • Medium 4.3
    CVE-2024-0967

    OpenText / Micro Focus ArcSight Enterprise Security Manager Remote Vulnerability

    A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Enterprise Security Manager (ESM). The vulnerability could be remotely exploited.

    OpenText ArcSight Enterprise Security Manager
  • Medium 4.9
    CVE-2023-4554

    XML External Entity (XXE) Processing

    Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an …

    OpenText AppBuilder
  • Medium 5.3
    CVE-2023-4553

    Unauthenticated Access to AppBuilder Configuration Files

    Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2.

    OpenText AppBuilder
  • Medium 5.5
    CVE-2023-4552

    Java Database Connectivity (JDBC) URL Manipulation

    Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including…

    OpenText AppBuilder