High · 8.5 CVE-2025-3478 EUVD-2025-25704GHSA-5p4q-pw87-h2g2

OpenText Enterprise Security Manager Stored XSS

Published Aug 25, 2025 · Updated Aug 25, 2025 · Assigned by OpenText

Vendor: OpenText Product: OpenText Enterprise Security Manager

Description

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited.

Affected products

Vendor	Product	Affected	Fixed
OpenText	OpenText Enterprise Security Manager	< 7.8.2	7.8.2

Advisories 1

WID-SEC-2025-1904 OpenText Enterprise Security Manager: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Aug 25, 2025

References

https://portal.microfocus.com/s/article/KM000042483 vendor-advisory