Read the docs

OpenText

Records253All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical36CVSS 9.0–10.0
CVSS high123CVSS 7.0–8.9

Exploited now

OpenText records in CISA KEV

No OpenText vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Brava! Desktop 35 records MEDIUM Documentum Content Server 8 records HIGH Vertica 8 records MEDIUM Document Sciences Xpression 7 records MEDIUM Opentext Extended Ecm 7 records HIGH Flipper 6 records LOW Appbuilder 5 records MEDIUM Documentum Webtop 5 records MEDIUM

Records

253 records

TI-2017-03590 CVE-2017-5586 · GHSA-42xq-c5pj-29x5

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to…

Priority MEDIUM 63

OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libr…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.25326 Published 2017-02-22 No fix listed CWE-20
TI-2024-01687 CVE-2024-1811 · GHSA-5w5g-r8w6-wjxw

OpenText ArcSight Platform Remote Vulnerability

Priority MEDIUM 50

A potential vulnerability has been identified in OpenText ArcSight Platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00562 Published 2024-03-20 Fixed in 23.2.1, 23.3.1 +1
TI-2024-01064 CVE-2024-1147 · GHSA-j6wj-78cm-xrrj

Weak Access Control - Arbitrary file download

Priority MEDIUM 50

Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and download of files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00697 Published 2024-03-21 Fixed in 8.6.3.3 CWE-287
TI-2023-04154 CVE-2023-4501 · GHSA-gxh2-p3fj-8cc8

Authentication bypass in OpenText (Micro Focus) Enterprise Server

Priority MEDIUM 50

User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise T…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00758 Published 2023-09-12 Fixed in 7.0.21, 8.0.10 +1 CWE-253
TI-2017-11193 CVE-2017-15276 · GHSA-c25x-pq2r-jrx2

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3…

Priority MEDIUM 50

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.09494 Published 2017-10-13 No fix listed CWE-22
TI-2023-10087 CVE-2023-24466 · GHSA-3vp6-4284-wj7c

Possible XML External Entity Injection in OpenText iManager

Priority MEDIUM 49

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-11-22 No fix listed CWE-611
TI-2017-11017 CVE-2017-15012 · GHSA-p3c6-gpgq-fm87

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3…

Priority MEDIUM 49

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE RPC-command, which allows any authenticated user to hijack an arbitrary file fr…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.07782 Published 2017-10-13 No fix listed CWE-20
TI-2026-71915 CVE-2026-75120 · GHSA-v6cw-jvjx-mmwj

Authentication bypass in OpenText EnCase SAFE Agents

Priority MEDIUM 48

The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vuln…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00412 Published 2026-10-13 No fix listed CWE-290
TI-2025-14238 CVE-2025-15610 · GHSA-7hj6-v8wx-jqjx

Deserialization of untrusted data in OpenText RightFax

Priority MEDIUM 48

The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remoting ports are accessible.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0031 Published 2026-04-15 No fix listed CWE-502
TI-2021-15814 CVE-2021-38132 · GHSA-7v38-xc68-49j2

Possible External service interaction Vulnerability

Priority MEDIUM 48

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2024-09-12 No fix listed CWE-918
TI-2017-11018 CVE-2017-15013 · GHSA-hvv7-ccqx-87f7

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3…

Priority MEDIUM 48

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server stores informatio…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.06639 Published 2017-10-13 No fix listed CWE-269
Load more
Open these records in search →