security@opentext.com
organizationCA01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@opentext.com
03
assessed vulnerabilities (331)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-75120US | — | — | ||
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ En… | ||||
| CVE-2025-15591US | — | — | ||
Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page. | ||||
| CVE-2026-12559US | — | — | ||
A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Vendor Invoice Management for SAP Solutions Capture Validation application. Under certain conditio… | ||||
| CVE-2025-3271US | — | — | ||
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS | ||||
| CVE-2026-13202US | — | — | ||
A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation.
This issue affects Opentext Directory Services: through 22.2. | ||||
| CVE-2026-11878US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).
This issue affects… | ||||
| CVE-2026-11877US | high7.5 | — | ||
An unauthorized user can modify configuration through API
calls that affects the OpenText Access
Manager. This issue affects Access Manager before 5.1.3. | ||||
| CVE-2025-15610US | — | — | ||
The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments where the remo… | ||||
| CVE-2026-2123US | high7.8 | — | ||
A security audit identified a privilege escalation
vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions
Operations Agent may run executables from spe… | ||||
| CVE-2024-11604US | — | — | ||
Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local… | ||||
| CVE-2025-13478US | — | — | ||
Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application… | ||||
| CVE-2026-3278US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnera… | ||||
| CVE-2025-12455US | high7.5 | — | ||
Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.
The vulnerability could lead to Password Brute Forcing in Vertica management con… | ||||
| CVE-2025-12454US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.
The vulnerability could lead to Refle… | ||||
| CVE-2025-12453US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.
The vulnerability could lead to Refle… | ||||
| CVE-2026-3266US | critical9.8OT elevated | — | ||
Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully… | ||||
| CVE-2025-9120US | — | — | ||
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows Code Injection.
The vulnerability could be exploited thro… | ||||
| CVE-2026-1658US | medium5.3 | — | ||
User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.
The vulnerability could be exploited by a bad… | ||||
| CVE-2025-9208US | medium5.4 | — | ||
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerabili… | ||||
| CVE-2025-8055US | — | — | ||
Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.
The vulnerability could allow an attacker to
perform blind SSRF to oth… | ||||