Vulnerabilities

TI-2023-04200 CVE-2023-4554 · GHSA-wgfc-hm58-hx63

XML External Entity (XXE) Processing

LOW 29

Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00435 Published 2024-01-29 Fixed in 23.2 CWE-611

TI-2023-04199 CVE-2023-4553 · GHSA-8p2h-w6cv-wr2w

Unauthenticated Access to AppBuilder Configuration Files

LOW 30

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00382 Published 2024-01-29 Fixed in 23.2 CWE-20

TI-2023-04198 CVE-2023-4552 · GHSA-pwgf-w5vm-vm95

Java Database Connectivity (JDBC) URL Manipulation

LOW 31

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0037 Published 2024-01-29 Fixed in 23.2 CWE-20

TI-2023-04197 CVE-2023-4551 · GHSA-7m9h-xc4x-cg98

Command Injection via Task Scheduler

MEDIUM 42

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01025 Published 2024-01-29 Fixed in 23.2 CWE-20

TI-2023-04196 CVE-2023-4550 · GHSA-crgw-m82j-jv5c

Unauthenticated arbitrary file read in OpenText AppBuilder

LOW 39

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00468 Published 2024-01-29 Fixed in 23.2 CWE-20