Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

OpenText — Vulnerabilities & Security Advisories 147

Browse all 147 CVE security advisories affecting OpenText. AI-powered Chinese analysis, POCs, and references for each vulnerability.

OpenText operates as a global enterprise information management provider, offering solutions for content management, digital asset management, and analytics. Its extensive software portfolio, including Content Server and Exstream, has historically been a frequent target for security researchers, resulting in a significant number of recorded Common Vulnerabilities and Exposures. The most prevalent vulnerability classes affecting these platforms include remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation or improper access controls. While the company maintains standard security protocols, the sheer volume of its legacy and integrated applications creates a broad attack surface. Recent incidents highlight the critical need for rigorous patch management and continuous monitoring to mitigate risks associated with these complex enterprise systems, ensuring that sensitive data remains protected against evolving cyber threats.

CVE ID Title CVSS Severity Published
CVE-2021-38118 Possible Local Privilege Escalation Vulnerability in OpenText iManager — iManager CWE-250 5.5 Medium 2024-11-22
CVE-2021-38119 Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager — iManager CWE-79 6.1 Medium 2024-11-22
CVE-2021-38134 Possible Reflected and Stored XSS in OpenText iManager — iManager CWE-79 6.1 Medium 2024-11-22
CVE-2021-38135 Possible External service interaction Vulnerability in OpenText iManager — iManager CWE-918 8.6 High 2024-11-22
CVE-2022-26324 Possible XSS in iManager URL for access Component — iManager CWE-79 7.6 High 2024-11-22
CVE-2023-24466 Possible XML External Entity Injection in OpenText iManager — iManager CWE-611 7.5 High 2024-11-22
CVE-2023-24467 Possible Command Injection in OpenText iManager — iManager CWE-77 8.8 High 2024-11-22
CVE-2024-9841 OpenText ArcSight Management Center and ArcSight Platform Stored XSS — ArcSight Management Center CWE-79 6.1 - 2024-11-08
CVE-2020-11859 Potential Cross Site Scripting vulnerability in OpenText iManager — iManager CWE-79 7.6 High 2024-11-06
CVE-2024-4692 Multiple missing permission checks — OpenText Application Automation Tools CWE-280 4.3AI Medium AI 2024-10-16
CVE-2024-4690 Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools — OpenText Application Automation Tools CWE-611 9.8AI Critical AI 2024-10-16
CVE-2024-4211 Multiple missing permission checks — OpenText Application Automation Tools CWE-280 4.3AI Medium AI 2024-10-16
CVE-2024-4189 Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools — OpenText Application Automation Tools CWE-611 9.8AI Critical AI 2024-10-16
CVE-2024-4184 Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools — OpenText Application Automation Tools CWE-611 9.8AI Critical AI 2024-10-16
CVE-2021-22503 Improper Neutralization of Input During Web Page Generation Vulnerability — eDirectory CWE-79 5.4 Medium 2024-09-12
CVE-2021-22518 Sensitive Information logging in NetIQ Identity Manager Driver — Identity Manager AzureAD Driver CWE-532 5.8 Medium 2024-09-12
CVE-2021-22532 Possible NLDAP Denial of Service attack Vulnerability — eDirectory CWE-770 7.6 High 2024-09-12
CVE-2021-22533 Possible Insertion of Sensitive Information into Log File Vulnerability — eDirectory CWE-532 6.5 Medium 2024-09-12
CVE-2021-38131 Cross-Site Scripting (XSS) Vulnerability — eDirectory CWE-79 5.4 Medium 2024-09-12
CVE-2021-38132 Possible External service interaction Vulnerability — eDirectory CWE-918 5.3 Medium 2024-09-12
CVE-2021-38133 Possible Improper authentication Vulnerability in OpenText eDirectory — eDirectory CWE-521 7.4 High 2024-09-12
CVE-2022-26322 Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager — Identity Manager REST Driver 1.1.2.0200 CWE-532 4.9 Medium 2024-09-12
CVE-2021-22509 Handling of sensitive data in process memory in NetIQ Advance Authentication — NetIQ Advance Authentication CWE-312 8.1 High 2024-08-28
CVE-2021-22529 Sensitive Data Exposure leaks potential information in NetIQ Advance Authentication — NetIQ Advance Authentication CWE-200 6.3 Medium 2024-08-28
CVE-2021-22530 Improper account management vulnerability in NetIQ Advance Authentication — NetIQ Advance Authentication CWE-667 8.2 High 2024-08-28
CVE-2021-38120 Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication — NetIQ Advance Authentication CWE-77 5.1 Medium 2024-08-28
CVE-2021-38121 Weak communication protocol identified in Advance Authentication client application — NetIQ Advance Authentication CWE-326 8.3 High 2024-08-28
CVE-2021-38122 Cross-Site Scripting (XSS) in Advance Authentication — NetIQ Advance Authentication CWE-20 6.2 Medium 2024-08-28
CVE-2024-4554 Multiple xss vulnerability in NetIQ Access Manager — Access Manager CWE-79 7.3 High 2024-08-28
CVE-2024-4555 User impersonation with MFA when configure in specific way — NetIQ Access Manager CWE-266 7.7 High 2024-08-28

This page lists every published CVE security advisory associated with OpenText. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.