Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-76580 EUVD-2026-117757GHSA-vwg9-fxp4-r3rx

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services …

Published Nov 5, 2026 · Updated Nov 5, 2026 · Assigned by OpenText

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Cross-Site Scripting (XSS).

This issue affects OpenText Directory Services (OTDS): from 25.1 through 26.2.

Affected products

VendorProductAffectedFixed
OpenText OpenText Directory Services (OTDS) 25.1 – ≤ 26.2 26.2.5

References