Vulnerabilidades de OpenText
CVEs publicadas que afetam produtos de OpenText: 32 registro(s), com severidade, exploração e correções.
Flipper 6Vertica 4Web Site Management Server 3Directory Services 3Xm Fax 2Access Manager 2Vendor Invoice Management for SAP Solutions 1Documentum Webtop 1RightFax 1Content Management 1Operations Agent 1Identity Manager 1Endpoint Security 1Information Assurance 1Endpoint Forensics & Response 1Endpoint Investigator 1uCMDB 1IDM Driver and Extensions 1Carbonite Safe Server Backup 1Zenworks Service Desk 1Filr 1
CVE-2025-11884
Baixa · 2.3
CWE-79 19/11/2025
Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts
This issue affects uCMDB: 24.4.
CVE-2025-8050
Média · 6.5
CWE-73 21/10/2025
External Control of File vulnerability has been discovered in opentext Flipper.
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal.
The vulnerability could allow a user to access files hosted on the server.
This issue affects Flipper: 3.1.2.
CVE-2025-8053
Crítica · 9.1
CWE-1220 20/10/2025
Insufficient access control vulnerability has been discovered in Opentext Flipper.
Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges.
This issue affects Flipper: 3.1.2.
CVE-2025-8052
Alta · 8.8
CWE-564 20/10/2025
HQL Injection vulnerability has been discovered in Opentext Flipper.
SQL Injection vulnerability in opentext Flipper allows SQL Injection.
The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor.
This issue affects Flipper: 3.1.2.
CVE-2025-8051
Média · 6.5
CWE-35 20/10/2025
Path traversal validation vulnerability has been discovered in opentext Flipper.
Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.
The vulnerability could allow a user to access files hosted on the server.
This issue affects Flipper: 3.1.2.
CVE-2025-8049
Alta · 8.8
CWE-1220 20/10/2025
Insufficient Access Control vulnerability has been discovered in OpenText Flipper.
Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application.
This issue affects Flipper: 3.1.2.
CVE-2025-8048
Média · 6.5
CWE-73 20/10/2025
External Control of File path vulnerability has been discovered on Openext Flipper.
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file
path and then download the specified file from the system by requesting the
stored document ID.
This issue affects Flipper: 3.1.2.