Low severity · published May 27, 2025
CVE-2025-2236
Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.
2.1
CVSS
0.2%
EPSS
No
On KEV
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services.
This issue affects Advanced Authentication versions before 6.5.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Advanced Authentication · OpenText
before 6.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2236
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2236
portal.microfocus.com
https://portal.microfocus.com/s/article/KM000039947
More from Advanced Authentication
6.1
CVE-2025-8616
Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication