Opentext Security Vulnerabilities (CVEs)
Track 22 security vulnerabilities affecting Opentext products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.
This CVE describes a UI misrepresentation vulnerability in OpenText Directory Services that allows cache poisoning. An attacker can inject manipulated...
Feb 19, 2026This is a reflected cross-site scripting (XSS) vulnerability in OpenText Web Site Management Server that allows attackers to inject malicious JavaScri...
Feb 19, 2026This Server-Side Request Forgery (SSRF) vulnerability in OpenText XM Fax allows attackers to make the vulnerable server send requests to internal syst...
Feb 19, 2026This path traversal vulnerability in OpenText Flipper allows attackers to access arbitrary files on the server by manipulating file paths. It affects ...
Oct 21, 2025This path traversal vulnerability in OpenText Flipper allows attackers to access arbitrary files on the server by manipulating file path parameters. I...
Oct 20, 2025CVE-2025-8049 is an access control vulnerability in OpenText Flipper that allows low-privilege users to escalate their privileges within the applicati...
Oct 20, 2025This SQL injection vulnerability in OpenText Flipper allows low-privilege users to execute arbitrary SQL queries through the HQL processor, potentiall...
Oct 20, 2025This CVE describes an access control vulnerability in OpenText Flipper where low-privilege users can interact with backend APIs without proper authori...
Oct 20, 2025This vulnerability allows attackers to abuse incorrect permissions on Vertica agent API keys, potentially gaining unauthorized access or elevated priv...
Oct 2, 2024A path traversal vulnerability in OpenText CX-E Voice allows attackers to access arbitrary files on the system by manipulating file paths. This affect...
Aug 22, 2024CVE-2024-6358 is an incorrect authorization vulnerability in OpenText ArcSight Intelligence that allows authenticated users to access resources or per...
Aug 6, 2024This vulnerability in OpenText NetIQ Privileged Account Manager allows attackers to flood the system with requests, causing resource exhaustion and po...
Mar 13, 2024This CVE describes an improper input neutralization vulnerability (Cross-Site Scripting) in OpenText ALM Octane versions 16.2.100 and above. Attackers...
Feb 15, 2024CVE-2023-4550 is an improper input validation vulnerability in OpenText AppBuilder that allows unauthenticated or authenticated users to read arbitrar...
Jan 29, 2024This XXE vulnerability in OpenText Archive Center Administration allows authenticated users to upload malicious XML files that can lead to data exfilt...
May 24, 2023CVE-2023-31871 is a privilege escalation vulnerability in OpenText Documentum Content Server where a non-privileged user can exploit the dm_secure_wri...
May 18, 2023CVE-2022-35898 is an authentication bypass vulnerability in OpenText BizManager that allows any authenticated user to change passwords for any other u...
May 1, 2023CVE-2021-31503 is a remote code execution vulnerability in OpenText Brava! Desktop that allows attackers to execute arbitrary code by tricking users i...
Aug 3, 2021CVE-2021-31507 is a buffer overflow vulnerability in OpenText Brava! Desktop that allows remote code execution when a user opens a malicious CGM file ...
Jun 29, 2021CVE-2021-31509 is a buffer overflow vulnerability in OpenText Brava! Desktop that allows remote code execution when processing malicious DXF files. At...
Jun 29, 2021CVE-2021-31511 is a heap-based buffer overflow vulnerability in OpenText Brava! Desktop's PDF parser that allows remote code execution. Attackers can ...
Jun 29, 2021CVE-2021-31513 is a buffer overflow vulnerability in OpenText Brava! Desktop's BMP file parser that allows remote code execution. Attackers can exploi...
Jun 29, 2021Why Monitor Opentext Security Vulnerabilities?
Real-time CVE tracking: Our automated system monitors 22+ known vulnerabilities affecting Opentext products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.
Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Opentext packages in under 60 seconds. No agents required - completely agentless scanning that works across Opentext deployments.
Free vulnerability database: Access detailed information about every Opentext CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.
🚀 Get Started in 60 Seconds
- Register free account & add your servers
- Run one-time scan or schedule automatic monitoring (every 1-24 hours)
- Receive instant alerts when new Opentext CVEs affect your systems
- Access dashboard with severity breakdown & fix instructions
