Vulnerabilidades em OpenText

148 resultados
Análise Vexday

Com 137 CVEs catalogadas, o portfólio de vulnerabilidades da OpenText apresenta uma taxa de exploração ativa abaixo da média geral do catálogo CISA KEV, sem registros de falhas em exploração confirmada no momento. As 6 vulnerabilidades de severidade crítica e a ausência de provas de conceito públicas conhecidas reduzem, em parte, o risco imediato de exploração em larga escala. O tipo de falha mais recorrente é CWE-787 (escrita fora dos limites de memória), categoria que historicamente favorece execução remota de código e merece atenção prioritária em processos de patch management. A CVE mais relevante no momento, CVE-2021-31508, registra um EPSS de 0,0181, indicando baixa probabilidade estimada de exploração ativa no curto prazo, embora sua presença no radar recomende monitoramento contínuo.

CVE-2024-2834HIGHOpenText ArcSight Management Center and ArcSight Platform Stored XSSEPSS 0.5%CVE-2020-11843MEDIUMPotential information leakage in administrator enabled debug modeEPSS 0.5%CVE-2024-3486HIGH XML External Entity injection vulnerability in iManagerEPSS 0.5%CVE-2023-4550HIGHUnauthenticated Arbitrary File ReadEPSS 0.5%CVE-2024-10863MEDIUMClient-side audit exclusion vulnerabilityEPSS 0.5%CVE-2024-4184MEDIUMMultiple XXE sinks in ALM archive post-build step in OpenText Application Automation ToolsEPSS 0.5%CVE-2024-4189MEDIUMMultiple XXE sinks in Run LoadRunner script step in OpenText Application Automation ToolsEPSS 0.5%CVE-2021-38135HIGHPossible External service interaction Vulnerability in OpenText iManagerEPSS 0.5%CVE-2021-22533MEDIUMPossible Insertion of Sensitive Information into Log File VulnerabilityEPSS 0.4%CVE-2025-2517LOWReference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security ManagerEPSS 0.4%CVE-2023-4554MEDIUMXML External Entity (XXE) ProcessingEPSS 0.4%CVE-2021-22508HIGHPotential SQL injection in OpenText Operations Bridge ReporterEPSS 0.4%CVE-2024-4556MEDIUMDirectory traversal vulnerability in NetIQ Access ManagerEPSS 0.4%CVE-2024-3487LOWBroken Authentication vulnerability in iManagerEPSS 0.4%CVE-2024-10865CRITICALReflected Cross-Site Scripting vulnerability in OpenText Advanced AuthenticationEPSS 0.4%CVE-2022-26328LOWUser enumeration vulnerability has been discovered in OpenText™ Performance CenterEPSS 0.4%CVE-2021-38132MEDIUMPossible External service interaction VulnerabilityEPSS 0.4%CVE-2025-8051MEDIUMPath traversal validation vulnerability has been discovered in opentext Flipper.EPSS 0.4%CVE-2024-4690MEDIUMInsecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation ToolsEPSS 0.4%CVE-2024-12863MEDIUMStored XSS in Discussions functionalityEPSS 0.4%