Vulnerabilities

TI-2026-10248 CVE-2026-11877 · GHSA-3frm-wcmv-8jx7

Missing Authorization Vulnerability in OpenText Access Manager

LOW 28

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00305 Published 2026-06-24 No fix listed CWE-648

TI-2026-10249 CVE-2026-11878 · GHSA-rrp3-3f6h-33jr

Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

LOW 35

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00221 Published 2026-06-24 No fix listed CWE-79

TI-2026-01775 CVE-2026-2123 · GHSA-5mwg-54j5-6ch5

Privilege escalation vulnerability in Operations Agent

LOW 38

A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.

CVSS 4.0HIGH 8.6 Local Low privileges User interaction EPSS 0.00102 Published 2026-03-31 No fix listed CWE-280

TI-2021-15799 CVE-2021-38116 · GHSA-78x5-mw8r-c5mr

Possible Command injection Vulnerability in OpenText iManager

MEDIUM 41

Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00619 Published 2024-11-22 No fix listed CWE-77

TI-2021-15800 CVE-2021-38117 · GHSA-x749-4jc5-gxmr

Possible Remote Code Execution Vulnerability OpenText iManager

MEDIUM 45

Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01143 Published 2024-11-22 No fix listed CWE-94

TI-2021-15801 CVE-2021-38118 · GHSA-c3hf-4f7r-m69m

Possible Local Privilege Escalation Vulnerability in OpenText iManager

LOW 33

Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2024-11-22 No fix listed CWE-250

TI-2021-15802 CVE-2021-38119 · GHSA-2v57-2gwr-vg5h

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager

LOW 27

Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-11-22 No fix listed CWE-79

TI-2021-15816 CVE-2021-38134 · GHSA-335h-h5hx-g42j

Possible Reflected and Stored XSS in OpenText iManager

LOW 27

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00308 Published 2024-11-22 No fix listed CWE-79

TI-2021-15817 CVE-2021-38135 · GHSA-mh6w-9w29-7xph

Possible External service interaction Vulnerability in OpenText iManager

MEDIUM 48

Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00453 Published 2024-11-22 No fix listed CWE-406

TI-2022-09703 CVE-2022-26324 · GHSA-58pv-8xf3-c5r4

Cross-site scripting in OpenText iManager

LOW 33

Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00303 Published 2024-11-22 No fix listed CWE-79

TI-2023-10087 CVE-2023-24466 · GHSA-3vp6-4284-wj7c

Possible XML External Entity Injection in OpenText iManager

MEDIUM 49

Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-11-22 No fix listed CWE-611

TI-2023-10088 CVE-2023-24467 · GHSA-g6hx-mx2f-fvx9

Possible Command Injection in OpenText iManager

MEDIUM 45

Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01106 Published 2024-11-22 No fix listed CWE-77

TI-2024-09132 CVE-2024-9841 · GHSA-7r42-p46c-33g2

OpenText ArcSight Management Center and ArcSight Platform Stored XSS

LOW 30

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00253 Published 2024-11-08 Fixed in 3.2.5 P1, 24.2.2 CWE-79

TI-2020-09529 CVE-2020-11859 · GHSA-3m9q-xm72-wq62

Potential Cross Site Scripting vulnerability in OpenText iManager

LOW 33

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS).

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.00354 Published 2024-11-06 Fixed in < CWE-79

TI-2024-05143 CVE-2024-5532 · GHSA-cm3c-fgqh-p9r2

A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).

LOW 9

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.

CVSS 4.0LOW 1.8 Local High privileges No interaction EPSS 0.00189 Published 2024-10-28 No fix listed CWE-79

TI-2024-04366 CVE-2024-4692 · GHSA-gxhw-gx89-g9ch

Multiple missing permission checks

LOW 10

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00289 Published 2024-10-16 No fix listed CWE-280

TI-2024-04365 CVE-2024-4690 · GHSA-vfmw-mcw8-m32f

Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools

LOW 23

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00403 Published 2024-10-16 No fix listed CWE-611

TI-2024-03917 CVE-2024-4211 · GHSA-qrr4-q9rq-pfvg

Multiple missing permission checks

LOW 10

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0LOW 1.8 Network High privileges User interaction EPSS 0.00289 Published 2024-10-16 No fix listed CWE-280

TI-2024-03897 CVE-2024-4189 · GHSA-5h3x-3x9g-9c2m

Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools

LOW 27

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00474 Published 2024-10-16 No fix listed CWE-611

TI-2024-03892 CVE-2024-4184 · GHSA-8mj2-x5qq-7m6c

Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools

LOW 27

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00474 Published 2024-10-16 No fix listed CWE-611

TI-2024-05902 CVE-2024-6360 · GHSA-856w-qx7w-v664

Incorrect Permission Assignment for Critical Resource vulnerability has been discovered in OpenText™ Vertica.

LOW 30

Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica agent apikey.

CVSS 4.0MEDIUM 6.9 Local High privileges No interaction EPSS 0.00308 Published 2024-10-02 No fix listed CWE-732

TI-2021-05472 CVE-2021-22503 · GHSA-5jrh-c32g-j2q9

Improper Neutralization of Input During Web Page Generation Vulnerability

LOW 27

Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00245 Published 2024-09-12 Fixed in < CWE-79

TI-2021-05500 CVE-2021-22532 · GHSA-gmjh-p826-vp24

Resource allocation without limits in OpenText eDirectory

LOW 33

Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00369 Published 2024-09-12 Fixed in < CWE-770

TI-2021-05501 CVE-2021-22533 · GHSA-mfqr-wp5f-9gj8

Sensitive information in log files in OpenText eDirectory

MEDIUM 42

Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00438 Published 2024-09-12 Fixed in < CWE-532

TI-2021-15813 CVE-2021-38131 · GHSA-c9h3-w54v-5g3j

Cross-site scripting (XSS) in OpenText eDirectory

LOW 27

Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00245 Published 2024-09-12 No fix listed CWE-79

Vulnerabilities

Filters