Read the docs

OpenText

Records253All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical36CVSS 9.0–10.0
CVSS high123CVSS 7.0–8.9

Exploited now

OpenText records in CISA KEV

No OpenText vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Brava! Desktop 35 records MEDIUM Documentum Content Server 8 records HIGH Vertica 8 records MEDIUM Document Sciences Xpression 7 records MEDIUM Opentext Extended Ecm 7 records HIGH Flipper 6 records LOW Appbuilder 5 records MEDIUM Documentum Webtop 5 records MEDIUM

Records

5 records in Appbuilder · all components

TI-2023-04197 CVE-2023-4551 · GHSA-7m9h-xc4x-cg98

Command Injection via Task Scheduler

Priority MEDIUM 42

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01025 Published 2024-01-29 Fixed in 23.2 CWE-20
TI-2023-04196 CVE-2023-4550 · GHSA-crgw-m82j-jv5c

Unauthenticated arbitrary file read in OpenText AppBuilder

Priority LOW 39

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00468 Published 2024-01-29 Fixed in 23.2 CWE-20
TI-2023-04198 CVE-2023-4552 · GHSA-pwgf-w5vm-vm95

Java Database Connectivity (JDBC) URL Manipulation

Priority LOW 31

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0037 Published 2024-01-29 Fixed in 23.2 CWE-20
TI-2023-04199 CVE-2023-4553 · GHSA-8p2h-w6cv-wr2w

Unauthenticated Access to AppBuilder Configuration Files

Priority LOW 30

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00382 Published 2024-01-29 Fixed in 23.2 CWE-20
TI-2023-04200 CVE-2023-4554 · GHSA-wgfc-hm58-hx63

XML External Entity (XXE) Processing

Priority LOW 29

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00435 Published 2024-01-29 Fixed in 23.2 CWE-611
Open these records in search →