Vulnerabilities in opentext

147 results
Vexday analysis

OpenText apresenta 9 vulnerabilidades catalogadas na base do Vexday, nenhuma delas sob ataque ativo ou com severidade crítica. Não há publicações recentes (últimos 90 dias), indicando um panorama de risco estável e sem pressão imediata. A fraqueza predominante (CWE-1220 - Insufficient Granularity of Access Control) sugere questões estruturais de controle de acesso que merecem atenção em roadmaps de correção de longo prazo.

CVE-2024-2834HIGHOpenText ArcSight Management Center and ArcSight Platform Stored XSSEPSS 0.5%CVE-2020-11843MEDIUMPotential information leakage in administrator enabled debug modeEPSS 0.5%CVE-2024-3486HIGH XML External Entity injection vulnerability in iManagerEPSS 0.5%CVE-2023-4550HIGHUnauthenticated Arbitrary File ReadEPSS 0.5%CVE-2024-4184MEDIUMMultiple XXE sinks in ALM archive post-build step in OpenText Application Automation ToolsEPSS 0.5%CVE-2024-4189MEDIUMMultiple XXE sinks in Run LoadRunner script step in OpenText Application Automation ToolsEPSS 0.5%CVE-2024-10863MEDIUMClient-side audit exclusion vulnerabilityEPSS 0.4%CVE-2021-38135HIGHPossible External service interaction Vulnerability in OpenText iManagerEPSS 0.4%CVE-2021-22533MEDIUMPossible Insertion of Sensitive Information into Log File VulnerabilityEPSS 0.4%CVE-2023-4554MEDIUMXML External Entity (XXE) ProcessingEPSS 0.4%CVE-2021-22508HIGHPotential SQL injection in OpenText Operations Bridge ReporterEPSS 0.4%CVE-2024-4556MEDIUMDirectory traversal vulnerability in NetIQ Access ManagerEPSS 0.4%CVE-2024-3487LOWBroken Authentication vulnerability in iManagerEPSS 0.4%CVE-2025-2517LOWReference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security ManagerEPSS 0.4%CVE-2022-26328LOWUser enumeration vulnerability has been discovered in OpenText™ Performance CenterEPSS 0.4%CVE-2021-38132MEDIUMPossible External service interaction VulnerabilityEPSS 0.4%CVE-2024-10865CRITICALReflected Cross-Site Scripting vulnerability in OpenText Advanced AuthenticationEPSS 0.4%CVE-2024-4690MEDIUMInsecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation ToolsEPSS 0.4%CVE-2023-4553MEDIUMUnauthenticated Access to AppBuilder Configuration FilesEPSS 0.4%CVE-2024-1973HIGHElevation of privileges vulnerabilityEPSS 0.4%