Vulnerability · Published Feb 19, 2026 · Assigned by OpenText

CVE-2025-13671Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.

Medium 5.9

In plain English

A medium-severity cross-site request forgery in Web Site Management Server from OpenText™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 4.0)5.9Medium

Exploit odds (30 days)0.2%top 93.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Affected products (as reported)

Vendor	Product	Versions
OpenText™	Web Site Management Server	16.7.016.7.1

Weakness: CWE-352 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/R:U/V:D/RE:H/U:Red

In plain English

Official description

Affected products (as reported)

References