CVE-2023-32259— Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.
Quick assessment
Affected
OpenText™ Service Management Automation X (SMAX)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenText Service Management Automation X是美国OpenText公司的一种让一切变得简单的高级服务管理。基于嵌入式机器学习和分析，为 IT 服务管理 (ITSM)、IT 资产管理 (ITAM) 和企业服务管理 (ESM) 提供更智能的方法。 OpenText Service Management Automation X 存在安全漏洞，该漏洞源于访问控制粒度不足，允许攻击者在未经适当授权的情况下提交创意记录，以下产品和版本受到影响：Service Management
Possible ATT&CK Techniques 1 AI
T1546.001 · Change Default File Association
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-32259
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.
Source: CVE Program / CVE List V5
Vulnerability Description
Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1220
Source: CVE Program / CVE List V5
Vulnerability Title
OpenText Service Management Automation X 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenText Service Management Automation X是美国OpenText公司的一种让一切变得简单的高级服务管理。基于嵌入式机器学习和分析，为 IT 服务管理 (ITSM)、IT 资产管理 (ITAM) 和企业服务管理 (ESM) 提供更智能的方法。 OpenText Service Management Automation X 存在安全漏洞，该漏洞源于访问控制粒度不足，允许攻击者在未经适当授权的情况下提交创意记录，以下产品和版本受到影响：Service Management
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| OpenText™ | Service Management Automation X (SMAX) | 2020.05 | - |
|
| OpenText™ | Asset Management X (AMX) | 2021.08 | - |
|
II. Public POCs for CVE-2023-32259
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-32259
请登录查看更多情报信息。
Other References for CVE-2023-32259 (1)
IV. Related Vulnerabilities
Same vendor: OpenText™
-
CVE-2026-3278
XSS Vulnerability discovered in OpenText™ ZENworks Service D -
CVE-2025-12453
Improper neutralization of input during web page generation -
CVE-2025-12454
Improper neutralization of input during web page generation -
CVE-2025-12455
Username Enumeration Observable Response Discrepancy vulnera -
CVE-2026-3266
Improper access control vulnerability has been discovered in
Same weakness: CWE-1220
-
CVE-2026-78122
docker-socket-proxy through 0.5.0 Insufficient Access Contro -
CVE-2026-40145
Control protections bypass in BeyondTrust Endpoint Privilege -
CVE-2026-68868
Apache Airflow Google provider: google Secret Manager backen -
CVE-2026-62721
Windows User-Mode Power Service (UMPS) Elevation of Privileg -
CVE-2026-16560
389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swa
V. Comments for CVE-2023-32259
No comments yet