OpenText

Products

ProductCVEsExploitedLatest
Brava! Desktop36–Aug 3, 2021
iManager21–Nov 22, 2024
NetIQ Advance Authentication6–Aug 28, 2024
eDirectory6–Sep 12, 2024
Flipper6–Oct 21, 2025
AppBuilder5–Jan 29, 2024
Vertica5–Mar 13, 2026
ArcSight Platform5–Nov 8, 2024
Operations Bridge Manager5–Nov 5, 2026
OpenText Application Automation Tools5–Oct 16, 2024
ArcSight Enterprise Security Manager4–Apr 21, 2025
Access Manager3–Jun 24, 2026
NetIQ Access Manager3–Aug 28, 2024
Asset Management X (AMX)3–Mar 19, 2024
OpenText Content Management3–Sep 11, 2025
OpenText Directory Services3–Aug 17, 2026
OpenText Directory Services (OTDS)3–Nov 5, 2026
Operations Agent3–Mar 31, 2026
Exceed Turbo X3–Mar 13, 2024
Privileged Access Manager3–Dec 19, 2024
Secure Content Manager3–Apr 17, 2025
Service Management Automation X (SMAX)3–Mar 19, 2024
Filr3–Mar 3, 2026
ArcSight Intelligence3–Aug 6, 2024
Web Site Management Server3–Feb 19, 2026
Directory Services3–Feb 19, 2026
Service Manager2–Mar 12, 2025
Dimensions RM2–May 23, 2024
OpenText Enterprise Security Manager2–Aug 25, 2025
Advance Authentication2–May 14, 2025
Network Node Manager i (NNMi)2–Aug 23, 2024
ALM Octane.2–Aug 5, 2024
Advanced Authentication2–Aug 6, 2025
Performance Center2–Aug 21, 2024
ArcSight Management Center2–Nov 8, 2024
PVCS Version Manager2–Mar 21, 2024
Advanced Authentication Server2–Oct 29, 2026
Self Service Password Reset2–Aug 29, 2025
XM Fax2–Feb 19, 2026
ZENworks Service Desk1–Mar 18, 2026
ALM Octane Management1–Nov 12, 2024
Application Lifecycle Management (ALM),Quality Center1–Oct 16, 2024
ArcSight Logger1–Jun 11, 2024
Carbonite Safe Server Backup1–Feb 24, 2026
Content Management1–Oct 6, 2026
Content Management (Extended ECM)1–Feb 4, 2025
Content Server1–Apr 21, 2025
CX-E Voice1–Aug 22, 2024
Digital Asset Management.1–Apr 28, 2025
Documentum D21–Mar 8, 2024
Documentum™ Server1–Jul 30, 2024
Documentum Webtop1–Sep 9, 2026
Endpoint Forensics & Response1–Oct 13, 2026
Endpoint Investigator1–Oct 13, 2026
Endpoint Security1–Oct 13, 2026
Fortify ScanCentral DAST1–Nov 8, 2023
GroupWise1–Jul 3, 2025
Hybrid Cloud Management X (HCMX)1–Mar 19, 2024
Identity Manager1–Mar 27, 2026
Identity Manager Advanced Edition1–Mar 5, 2025
Identity Manager AzureAD Driver1–Sep 12, 2024
Identity Manager REST Driver 1.1.2.02001–Sep 12, 2024
IDM Driver and Extensions1–Mar 27, 2026
Information Assurance1–Oct 13, 2026
NetIQ Client Login Extension1–Feb 20, 2024
NetIQ Directory and Resource Administrator1–Jul 16, 2024
NetIQ Identity Console1–May 7, 2024
NetIQ Privileged Account Manager1–Mar 13, 2024
Operations Bridge Reporter1–May 17, 2024
Operations Bridge Suite (Containerized)1–Apr 17, 2025
Solutions Business Manager (SBM)1–Jan 15, 2025
uCMDB1–Nov 19, 2025
UCMDB ( Classic and Containerized)1–Apr 17, 2025
Universal Discovery and CMDB1–Nov 5, 2026
Vendor Invoice Management for SAP Solutions1–Sep 24, 2026
Vertica Management Console1–Mar 15, 2024
Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server1–Sep 12, 2023
ZENworks Configuration Management (ZCM)1–Mar 27, 2024

Exploited and recent CVEs

  • CVE-2026-18159 Medium 4.3 A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS): from 10.5 through 26.2. 0.2%
  • CVE-2026-76580 Medium 5.4 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Cross-Site Scripting (XSS) 0.2%
  • CVE-2026-19134 Medium 6.5 A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. This issue affects OpenText Directory Services (OTDS): from 22.1 to 26.2 0.3%
  • CVE-2026-1339 Medium 5.4 Open redirect vulnerability - UCMDB/Operations Bridge Manager 0.2%
  • CVE-2026-1339 Medium 5.4 Open redirect vulnerability - UCMDB/Operations Bridge Manager 0.2%
  • CVE-2026-112256 Critical 9.2 Logon bypass (trust of attacker-controlled completed-methods list) 0.2%
  • CVE-2026-112255 Low 2.9 Endpoint credential minting (insecure default allow-list) 0.5%
  • CVE-2026-75120 Critical 9.3 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 0.4%
  • CVE-2026-75120 Critical 9.3 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 0.4%
  • CVE-2026-75120 Critical 9.3 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 0.4%
  • CVE-2026-75120 Critical 9.3 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents 0.4%
  • CVE-2025-15591 Medium 5.3 Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management 0.3%
  • CVE-2026-12559 High 7.3 Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application 0.4%
  • CVE-2025-3271 Medium 4.8 DOM-based XSS vulnerability in OpenText™ Documentum Webtop 0.4%
  • CVE-2026-13202 High 7.3 HTML Injection in OTDS Swagger UI 0.4%
  • CVE-2026-11877 Medium 6.3 Missing Authorization Vulnerability in OpenText Access Manager 0.3%
  • CVE-2026-11878 High 8.2 Reflected Cross-Site Scripting vulnerability in OpenText Access Manager 0.2%
  • CVE-2026-2123 High 8.6 Privilege escalation vulnerability in Operations Agent 0.1%
  • CVE-2024-11604 High 7.3 Insertion of Sensitive Information into Log File 0.1%
  • CVE-2025-13478 High 8.4 Cache Misconfiguration Leading to Cross-User Data Exposure 0.3%
  • CVE-2026-3278 High 7.4 XSS Vulnerability discovered in OpenText™ ZENworks Service Desk. 0.1%
  • CVE-2025-12453 Medium 5.1 Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. 0.2%
  • CVE-2025-12454 Medium 5.1 Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. 0.2%
  • CVE-2025-12455 Medium 5.1 Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. 0.3%
  • CVE-2026-3266 High 8.3 Improper access control vulnerability has been discovered in OpenText™ Filr. 0.4%
  • CVE-2025-9120 High 8.6 RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup. 0.2%
  • CVE-2026-1658 Medium 5.3 Content spoofing vulnerability discovered in OpenText™ Directory Services 0.3%
  • CVE-2025-9208 High 7.5 Stored-XSS vulnerability discovered in OpenText WSM Management Server. 0.2%
  • CVE-2025-13671 Medium 5.9 Cross Site request forgery vulnerability discovered in OpenText WSM Management Server. 0.2%
  • CVE-2025-13672 High 7.0 Reflected Cross-Site Scripting discovered in OpenText WSM Management Server. 0.2%