CVE-2023-32260mediumCWE-115

CVE-2023-32260: medium-severity vulnerability in OpenText™ Service Management Automation X (SMAX)

A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.

Published · Updated

Follow this CVE+ Monitor Asset Management X+ Monitor Service Management Automation X

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
OpenText™ · Asset Management X (AMX)OpenText™ · Hybrid Cloud Management X (HCMX)OpenText™ · Service Management Automation X (SMAX)
Related CVEs — OpenText™ Service Management Automation X (SMAX)

In the same product, most dangerous first.

CVE-2023-32259MEDIUMPotential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.EPSS 0.3%