Low severity · published Jul 3, 2025
CVE-2025-0885
Incorrect Authorization vulnerability affects OpenText™ GroupWise
1.8
CVSS
0.1%
EPSS
No
On KEV
Description
Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels.
The vulnerability could allow unauthorized access to calendar items marked private.
This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
GroupWise · OpenText™
7 through 17.5; 23.4; 24.1; 24.2; 24.3; 24.4 · source: vendor