Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

OpenText — Vulnerabilities & Security Advisories 147

Browse all 147 CVE security advisories affecting OpenText. AI-powered Chinese analysis, POCs, and references for each vulnerability.

OpenText operates as a global enterprise information management provider, offering solutions for content management, digital asset management, and analytics. Its extensive software portfolio, including Content Server and Exstream, has historically been a frequent target for security researchers, resulting in a significant number of recorded Common Vulnerabilities and Exposures. The most prevalent vulnerability classes affecting these platforms include remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation or improper access controls. While the company maintains standard security protocols, the sheer volume of its legacy and integrated applications creates a broad attack surface. Recent incidents highlight the critical need for rigorous patch management and continuous monitoring to mitigate risks associated with these complex enterprise systems, ensuring that sensitive data remains protected against evolving cyber threats.

CVE ID Title CVSS Severity Published
CVE-2026-13202 HTML Injection in OTDS Swagger UI — Opentext Directory Services CWE-79 7.3 High 2026-08-17
CVE-2026-11877 Missing Authorization Vulnerability in OpenText Access Manager — Access Manager CWE-648 - - 2026-06-24
CVE-2026-11878 Reflected Cross-Site Scripting vulnerability in OpenText Access Manager — Access Manager CWE-79 - - 2026-06-24
CVE-2026-2123 Privilege escalation vulnerability in Operations Agent — Operations Agent CWE-280 7.8 - 2026-03-31
CVE-2024-11604 Insertion of Sensitive Information into Log File — IDM Driver and Extensions CWE-532 5.5 - 2026-03-27
CVE-2025-13478 Cache Misconfiguration Leading to Cross-User Data Exposure — Identity Manager CWE-522 3.1 - 2026-03-27
CVE-2025-8050 External Control of File vulnerability has been discovered in opentext Flipper. — Flipper CWE-73 6.5AI Medium AI 2025-10-21
CVE-2025-8052 HQL Injection vulnerability has been discovered in Opentext Flipper. — Flipper CWE-564 8.1AI High AI 2025-10-20
CVE-2025-8048 External Control of File path vulnerability has been discovered on Openext Flipper. — Flipper CWE-73 6.5AI Medium AI 2025-10-20
CVE-2025-8049 Insufficient Access Control vulnerability has been discovered in OpenText Flipper. — Flipper CWE-1220 7.8AI High AI 2025-10-20
CVE-2025-8051 Path traversal validation vulnerability has been discovered in opentext Flipper. — Flipper CWE-35 6.5AI Medium AI 2025-10-20
CVE-2025-8053 Insufficient access control vulnerability has been discovered in Opentext Flipper. — Flipper CWE-1220 8.8AI High AI 2025-10-20
CVE-2025-8716 Cache exploitation vulnerability — OpenText Content Management CWE-754 6.5AI Medium AI 2025-09-11
CVE-2025-5808 Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset — Self Service Password Reset CWE-1284 9.8 - 2025-08-29
CVE-2025-3478 OpenText Enterprise Security Manager Stored XSS — OpenText Enterprise Security Manager CWE-79 5.4AI Medium AI 2025-08-25
CVE-2025-8997 OpenText Enterprise Security Manager Information Exposure — OpenText Enterprise Security Manager CWE-598 7.5AI High AI 2025-08-25
CVE-2025-8616 Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication — Advanced Authentication CWE-294 9.8AI Critical AI 2025-08-06
CVE-2025-2236 Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication. — Advanced Authentication CWE-497 9.1AI Critical AI 2025-05-27
CVE-2024-10865 Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication — Advance Authentication CWE-79 6.1AI Medium AI 2025-05-14
CVE-2024-10864 SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication. — Advance Authentication CWE-89 9.8AI Critical AI 2025-05-14
CVE-2024-12543 A user enumeration and subsequent data integrity vulnerability affecting barcode functionality — OpenText Content Management CWE-841 4.3 - 2025-04-21
CVE-2024-12863 Stored XSS in Discussions functionality — OpenText Content Management CWE-79 5.4 - 2025-04-21
CVE-2025-2517 Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager — ArcSight Enterprise Security Manager CWE-672 9.8 - 2025-04-21
CVE-2024-12862 REST API allows users without permissions to remove external collaborators — Content Server CWE-863 4.3 - 2025-04-21
CVE-2024-12530 Insecure Dynamic-Link Library (DLL) Load vulnerability — Secure Content Manager CWE-427 7.8AI High AI 2025-04-17
CVE-2024-12799 Insufficiently Protected Credentials — Identity Manager Advanced Edition CWE-522 9.1 - 2025-03-05
CVE-2024-12111 Potential LDAP injection vulnerability in OpenText Privileged Access Manager — Privileged Access Manager CWE-77 8.0 High 2024-12-19
CVE-2024-10863 Client-side audit exclusion vulnerability — Secure Content Manager CWE-778 5.3 - 2024-11-22
CVE-2021-38116 Possible Command injection Vulnerability in OpenText iManager — iManager CWE-77 8.8 High 2024-11-22
CVE-2021-38117 Possible Remote Code Execution Vulnerability OpenText iManager — iManager CWE-94 8.8 High 2024-11-22

This page lists every published CVE security advisory associated with OpenText. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.