Vulnerabilidades em OpenText

157 resultados
Análise Vexday

Com 137 CVEs catalogadas, o portfólio de vulnerabilidades da OpenText apresenta uma taxa de exploração ativa abaixo da média geral do catálogo CISA KEV, sem registros de falhas em exploração confirmada no momento. As 6 vulnerabilidades de severidade crítica e a ausência de provas de conceito públicas conhecidas reduzem, em parte, o risco imediato de exploração em larga escala. O tipo de falha mais recorrente é CWE-787 (escrita fora dos limites de memória), categoria que historicamente favorece execução remota de código e merece atenção prioritária em processos de patch management. A CVE mais relevante no momento, CVE-2021-31508, registra um EPSS de 0,0181, indicando baixa probabilidade estimada de exploração ativa no curto prazo, embora sua presença no radar recomende monitoramento contínuo.

CVE-2024-4692LOWMultiple missing permission checksEPSS 0.3%CVE-2024-4211LOWMultiple missing permission checksEPSS 0.3%CVE-2025-8050MEDIUMExternal Control of File vulnerability has been discovered in opentext Flipper.EPSS 0.3%CVE-2021-38122MEDIUMCross-Site Scripting (XSS) in Advance AuthenticationEPSS 0.3%CVE-2025-8048MEDIUMExternal Control of File path vulnerability has been discovered on Openext Flipper.EPSS 0.3%CVE-2024-6358MEDIUMIncorrect Authorization vulnerabilityEPSS 0.3%CVE-2020-25836MEDIUMPotential information leakage resulting in unauthorized accessEPSS 0.3%CVE-2024-6357MEDIUMInsecure Direct Object Reference vulnerabilityEPSS 0.3%CVE-2025-8049LOWInsufficient Access Control vulnerability has been discovered in OpenText Flipper.EPSS 0.3%CVE-2024-4555HIGHUser impersonation with MFA when configure in specific wayEPSS 0.3%CVE-2024-6359MEDIUMPrivilege escalation vulnerabilityEPSS 0.3%CVE-2025-13478HIGHCache Misconfiguration Leading to Cross-User Data ExposureEPSS 0.3%CVE-2025-8053LOWInsufficient access control vulnerability has been discovered in Opentext Flipper.EPSS 0.3%CVE-2024-3485MEDIUMServer-Side Request Forgery vulnerability in iManagerEPSS 0.3%CVE-2024-9841HIGHOpenText ArcSight Management Center and ArcSight Platform Stored XSSEPSS 0.3%CVE-2026-112256CRITICALLogon bypass (trust of attacker-controlled completed-methods list)EPSS 0.2%CVE-2021-38131MEDIUMCross-Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2021-22503MEDIUMImproper Neutralization of Input During Web Page Generation VulnerabilityEPSS 0.2%CVE-2025-8716MEDIUMCache exploitation vulnerabilityEPSS 0.2%CVE-2021-22530HIGHImproper account management vulnerability in NetIQ Advance AuthenticationEPSS 0.2%