Skip to content
OpenAdvisories

Vendor

OpenText

204 known vulnerabilities.

Products

Brava! Desktop 36 iManager 21 eDirectory 6 NetIQ Advance Authentication 6 Flipper 6 AppBuilder 5 Operations Bridge Manager 5 OpenText Application Automation Tools 5 Vertica 5 ArcSight Platform 5 Filr 4 ArcSight Enterprise Security Manager 4 NetIQ Access Manager 3 Exceed Turbo X 3 Access Manager 3 Service Management Automation X (SMAX) 3 Operations Agent 3 Asset Management X (AMX) 3 OpenText Content Management 3 Web Site Management Server 3 Opentext Directory Services 3 Directory Services 3 ArcSight Intelligence 3 Privileged Access Manager 3 OpenText Directory Services (OTDS) 3 Secure Content Manager 3 Service Manager 2 Dimensions RM 2 ALM Octane. 2 OpenText Enterprise Security Manager 2 PVCS Version Manager 2 Performance Center 2 Advance Authentication 2 XM Fax 2 ArcSight Management Center 2 Advanced Authentication Server 2 Network Node Manager i (NNMi) 2 Advanced Authentication 2 Self Service Password Reset 2 Operations Bridge Reporter 1
All Critical High Medium Low Exploited only Public exploit

204 results · Feed

  • Medium 5.8
    CVE-2025-8716

    Cache exploitation vulnerability

    In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known.

    OpenText OpenText Content Management
  • High 7.3
    CVE-2025-5808

    Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset

    Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3.

    OpenText Self Service Password Reset
  • High 8.5
    CVE-2025-3478

    OpenText Enterprise Security Manager Stored XSS

    A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.

    OpenText OpenText Enterprise Security Manager
  • Medium 5.7
    CVE-2025-8997

    OpenText Enterprise Security Manager Information Exposure

    An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.

    OpenText OpenText Enterprise Security Manager
  • Medium 6.1
    CVE-2025-8616

    Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication

    A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0.

    OpenText Advanced Authentication
  • Medium 6.3
    CVE-2024-7650

    Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4

    Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.

    OpenText Directory Services
  • Low 1.8
    CVE-2025-0885

    Incorrect Authorization vulnerability affects OpenText™ GroupWise

    Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7 t…

    OpenText GroupWise
  • Low 2.1
    CVE-2025-2236

    Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external se…

    OpenText Advanced Authentication
  • Critical 9.4
    CVE-2024-10865

    Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication

    Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5.

    OpenText Advance Authentication
  • High 7.5
    CVE-2024-10864

    SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5

    OpenText Advance Authentication
  • Medium 6.7
    CVE-2025-3272

    Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.

    Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.  The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4.

    OpenText Operations Bridge Manager
  • Critical 9.4
    CVE-2025-3476

    Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege …

    OpenText Operations Bridge Manager
  • Low 2.1
    CVE-2024-12706

    SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue…

    OpenText Digital Asset Management.
  • Medium 5.9
    CVE-2024-12543

    A user enumeration and subsequent data integrity vulnerability affecting barcode functionality

    User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes.

    OpenText OpenText Content Management
  • Medium 5.6
    CVE-2024-12863

    Stored XSS in Discussions functionality

    Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.

    OpenText OpenText Content Management
  • Low 2.3
    CVE-2025-2517

    Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager

    Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.

    OpenText ArcSight Enterprise Security Manager
  • Medium 5.5
    CVE-2024-12862

    REST API allows users without permissions to remove external collaborators

    Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.

    OpenText Content Server
  • High 7.0
    CVE-2024-12530

    Insecure Dynamic-Link Library (DLL) Load vulnerability

    Uncontrolled Search Path Element vulnerability in OpenText Secure Content Manager on Windows allows DLL Side-Loading.This issue affects Secure Content Manager: 23.4. End-users can potentially exploit the vulnerability to execute malicious code in the trusted …

    OpenText Secure Content Manager
  • High 8.7
    CVE-2022-26323

    Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.

    Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation.  The vulnerability could allow authenticated at…

    OpenText Operations Bridge Manager Operations Bridge Suite (Containerized) UCMDB ( Classic and Containerized)
  • Low 2.1
    CVE-2025-0883

    vulnerability has been discovered in OpenText™ Service Manager.

    Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.  The vulnerability could reveal sensitive information retained by the browser. This issue affects Service Manager: 9.70, 9.71, 9.72, 9.80.

    OpenText Service Manager
  • High 7.3
    CVE-2025-0884

    Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager.

    Unquoted Search Path or Element vulnerability in OpenText™ Service Manager.  The vulnerability could allow a user to gain SYSTEM privileges through Privilege Escalation. This issue affects Service Manager: 9.70, 9.71, 9.72.

    OpenText Service Manager
  • Critical 10.0
    CVE-2024-12799

    Insufficiently Protected Credentials

    Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information vi…

    OpenText Identity Manager Advanced Edition
  • Medium 5.4
    CVE-2024-8125

    A remote code vulnerability has been discovered in OpenText™ Content Management.

    Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection.  A bad actor with the required OpenText Content Management privileges (not root) could expose the vulnerability to carry ou…

    OpenText Content Management (Extended ECM)
  • High 8.2
    CVE-2024-7085

    Exposure of private information vulnerability has been discovered in OpenText™ Solutions Business Manager (SBM).

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Solutions Business Manager (SBM) allows Stored XSS.  The vulnerability could result in the exposure of private information to an unauthorize…

    OpenText Solutions Business Manager (SBM)
  • High 8.0
    CVE-2024-12111

    Potential LDAP injection vulnerability in OpenText Privileged Access Manager

    In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)

    OpenText Privileged Access Manager
  • Medium 5.3
    CVE-2021-22501

    Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input…

    OpenText Operations Bridge Manager
  • Critical 9.0
    CVE-2019-17082

    Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on…

    OpenText AccuRev
  • Medium 5.1
    CVE-2024-10863

    Client-side audit exclusion vulnerability

    : Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit Log Manipulation.This issue affects Secure Content Manager: from 10.1 before <24.4. End-users can potentially exploit the vulnerability to exclude audit trails fro…

    OpenText Secure Content Manager
  • High 8.8
    CVE-2021-38116

    Possible Command injection Vulnerability in OpenText iManager

    Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5

    OpenText iManager
  • High 8.8
    CVE-2021-38117

    Possible Remote Code Execution Vulnerability OpenText iManager

    Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

    OpenText iManager
  • Medium 5.5
    CVE-2021-38118

    Possible Local Privilege Escalation Vulnerability in OpenText iManager

    Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

    OpenText iManager
  • Medium 6.1
    CVE-2021-38119

    Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager

    Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

    OpenText iManager
  • Medium 6.1
    CVE-2021-38134

    Possible Reflected and Stored XSS in OpenText iManager

    Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

    OpenText iManager
  • High 8.6
    CVE-2021-38135

    Possible External service interaction Vulnerability in OpenText iManager

    Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

    OpenText iManager
  • High 7.6
    CVE-2022-26324

    Possible XSS in iManager URL for access Component

    Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

    OpenText iManager
  • High 7.5
    CVE-2023-24466

    Possible XML External Entity Injection in OpenText iManager

    Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

    OpenText iManager
  • High 8.8
    CVE-2023-24467

    Possible Command Injection in OpenText iManager

    Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.

    OpenText iManager
  • High 8.6
    CVE-2024-10923

    Improper Neutralization vulnerability has been discovered in OpenText™ ALM Octane Management.

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ ALM Octane Management allows Stored XSS. The vulnerability could result in a remote code execution attack. This issue affects ALM Octane Man…

    OpenText ALM Octane Management
  • High 7.0
    CVE-2024-9841

    OpenText ArcSight Management Center and ArcSight Platform Stored XSS

    A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.

    OpenText ArcSight Platform ArcSight Management Center
  • High 7.6
    CVE-2020-11859

    Potential Cross Site Scripting vulnerability in OpenText iManager

    Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3

    OpenText iManager