OP
Vendor
OpenText
271
CVEs
0
On KEV
7
New 30D
Products
AA9.2
Advanced Authentication Server
OpenText
2 CVEs0 on KEV2 new
EF9.3
Endpoint Forensics & Response
OpenText
1 CVEs0 on KEV1 new
EI9.3
Endpoint Investigator
OpenText
1 CVEs0 on KEV1 new
ES9.3
Endpoint Security
OpenText
1 CVEs0 on KEV1 new
IA9.3
Information Assurance
OpenText
1 CVEs0 on KEV1 new
CM5.3
Content Management
OpenText
1 CVEs0 on KEV1 new
BD7.8
Brava! Desktop
Opentext
35 CVEs0 on KEV0 new
IM9.8
iManager
OpenText
21 CVEs0 on KEV0 new
DC8.8
Documentum Content Server
Opentext
9 CVEs0 on KEV0 new
VE9.8
Vertica
OpenText™
9 CVEs0 on KEV0 new
DS9.8
Document Sciences Xpression
Opentext
7 CVEs0 on KEV0 new
OE8.8
Opentext Extended Ecm
Opentext
7 CVEs0 on KEV0 new
DW8.8
Documentum Webtop
OpenText™
6 CVEs0 on KEV0 new
ED9.8
eDirectory
OpenText
6 CVEs0 on KEV0 new
FL9.1
Flipper
opentext
6 CVEs0 on KEV0 new
NA9.9
NetIQ Advance Authentication
OpenText
6 CVEs0 on KEV0 new
AP8.8
Appbuilder
Opentext
5 CVEs0 on KEV0 new
AP9.8
ArcSight Platform
OpenText
5 CVEs0 on KEV0 new
DS9.8
Directory Services
OpenText™
5 CVEs0 on KEV0 new
OA8.0
OpenText Application Automation Tools
OpenText
5 CVEs0 on KEV0 new
AE8.7
ArcSight Enterprise Security Manager
OpenText
4 CVEs0 on KEV0 new
DA8.8
Documentum Administrator
Opentext
4 CVEs0 on KEV0 new
DD9.8
Documentum D2
OpenText
4 CVEs0 on KEV0 new
EO–
Exceed Ondemand
Opentext
4 CVEs0 on KEV0 new
OB9.4
Operations Bridge Manager
OpenText™
4 CVEs0 on KEV0 new
AM7.5
Access Manager
OpenText
3 CVEs0 on KEV0 new
AO8.6
ALM Octane.
OpenText™
3 CVEs0 on KEV0 new
AI9.8
ArcSight Intelligence
OpenText
3 CVEs0 on KEV0 new
ET9.8
Exceed Turbo X
OpenText™
3 CVEs0 on KEV0 new
ET9.8
Exceed Turbox
Opentext
3 CVEs0 on KEV0 new
LE–
Livelink Ecm
Opentext
3 CVEs0 on KEV0 new
NA7.5
NetIQ Access Manager
OpenText
3 CVEs0 on KEV0 new
OC5.9
OpenText Content Management
OpenText
3 CVEs0 on KEV0 new
OD9.8
Opentext Directory Services
OpenText
3 CVEs0 on KEV0 new
PA8.0
Privileged Access Manager
OpenText
3 CVEs0 on KEV0 new
SC8.5
Secure Content Manager
OpenText
3 CVEs0 on KEV0 new
WS6.5
Web Site Management Server
OpenText™
3 CVEs0 on KEV0 new
AA9.4
Advance Authentication
OpenText
2 CVEs0 on KEV0 new
AA6.1
Advanced Authentication
OpenText
2 CVEs0 on KEV0 new
AM8.7
ArcSight Management Center
OpenText
2 CVEs0 on KEV0 new
AM6.5
Asset Management X (AMX)
OpenText™
2 CVEs0 on KEV0 new
BR7.8
Brava!
Opentext
2 CVEs0 on KEV0 new
CS5.5
Content Server
OpenText
2 CVEs0 on KEV0 new
DR8.8
Dimensions RM
OpenText
2 CVEs0 on KEV0 new
FI9.8
Filr
OpenText™
2 CVEs0 on KEV0 new
FI–
Firstclass
Opentext
2 CVEs0 on KEV0 new
NN4.8
Network Node Manager i (NNMi)
OpenText™
2 CVEs0 on KEV0 new
OE8.5
OpenText Enterprise Security Manager
OpenText
2 CVEs0 on KEV0 new
OA7.8
Operations Agent
OpenText™
2 CVEs0 on KEV0 new
PC5.1
Performance Center
OpenText
2 CVEs0 on KEV0 new
PV9.8
PVCS Version Manager
OpenText
2 CVEs0 on KEV0 new
SS7.3
Self Service Password Reset
OpenText
2 CVEs0 on KEV0 new
SM6.5
Service Management Automation X (SMAX)
OpenText™
2 CVEs0 on KEV0 new
SM7.3
Service Manager
OpenText™
2 CVEs0 on KEV0 new
XF7.5
XM Fax
OpenText™
2 CVEs0 on KEV0 new
AC9.0
AccuRev
OpenText™
1 CVEs0 on KEV0 new
AF9.0
Accurev For Ldap Integration
Opentext
1 CVEs0 on KEV0 new
AO8.6
ALM Octane Management
OpenText™
1 CVEs0 on KEV0 new
AQ5.3
Alm Quality Center
Opentext
1 CVEs0 on KEV0 new
AL5.3
Application Lifecycle Management (ALM),Quality Center
OpenText™
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112256 New | AA Advanced Authentication Server OpenText | 9.2 | Oct 29 | Logon bypass (trust of attacker-controlled completed-methods list) |
| CVE-2026-112255 New | AA Advanced Authentication Server OpenText | 2.9 | Oct 29 | Endpoint credential minting (insecure default allow-list) |
| CVE-2026-75120 | ES Endpoint Security OpenText | 9.3 | Oct 13 | Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents |
| CVE-2025-15591 | CM Content Management OpenText | 5.3 | Oct 6 | Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management |
| CVE-2026-12559 | VI Vendor Invoice Management for SAP Solutions OpenText | 7.3 | Sep 24 | Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application |
| CVE-2025-3271 | DW Documentum Webtop OpenText™ | 4.8 | Sep 9 | DOM-based XSS vulnerability in OpenText™ Documentum Webtop |
| CVE-2026-13202 | OD Opentext Directory Services OpenText | 7.3 | Aug 17 | HTML Injection in OTDS Swagger UI |
| CVE-2026-11877 | AM Access Manager OpenText | 7.5 | Jun 24 | Missing Authorization Vulnerability in OpenText Access Manager |
| CVE-2026-11878 | AM Access Manager OpenText | 6.1 | Jun 24 | Reflected Cross-Site Scripting vulnerability in OpenText Access Manager |
| CVE-2026-2123 | OA Operations Agent OpenText | 7.8 | Mar 31 | Privilege escalation vulnerability in Operations Agent |
| CVE-2024-11604 | ID IDM Driver and Extensions OpenText | 7.3 | Mar 27 | Insertion of Sensitive Information into Log File |
| CVE-2025-13478 | IM Identity Manager OpenText | 8.4 | Mar 27 | Cache Misconfiguration Leading to Cross-User Data Exposure |
| CVE-2026-3278 | ZS ZENworks Service Desk OpenText™ | 6.1 | Mar 18 | XSS Vulnerability discovered in OpenText™ ZENworks Service Desk. |
| CVE-2025-12453 | VE Vertica OpenText™ | 6.1 | Mar 13 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2025-12454 | VE Vertica OpenText™ | 6.1 | Mar 13 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2025-12455 | VE Vertica OpenText™ | 7.5 | Mar 13 | Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2026-3266 | FI Filr OpenText™ | 9.8 | Mar 3 | Improper access control vulnerability has been discovered in OpenText™ Filr. |
| CVE-2025-9120 | CS Carbonite Safe Server Backup OpenText™ | 8.6 | Feb 24 | RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup. |
| CVE-2026-1658 | DS Directory Services OpenText™ | 5.3 | Feb 19 | Content spoofing vulnerability discovered in OpenText™ Directory Services |
| CVE-2025-9208 | WS Web Site Management Server OpenText™ | 5.4 | Feb 19 | Stored-XSS vulnerability discovered in OpenText WSM Management Server. |
| CVE-2025-13671 | WS Web Site Management Server OpenText™ | 6.5 | Feb 19 | Cross Site request forgery vulnerability discovered in OpenText WSM Management Server. |
| CVE-2025-13672 | WS Web Site Management Server OpenText™ | 5.4 | Feb 19 | Reflected Cross-Site Scripting discovered in OpenText WSM Management Server. |
| CVE-2025-8054 | XF XM Fax OpenText™ | 7.5 | Feb 19 | Path Traversal vulnerability have been discovered in OpenText™ XM Fax. |
| CVE-2025-8055 | XF XM Fax OpenText™ | 5.3 | Feb 19 | SSRF vulnerability have been discovered in OpenText™ XM Fax |
| CVE-2025-15579 | DS Directory Services OpenText™ | 9.5 | Feb 18 | An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services. |
| CVE-2024-9432 | VE Vertica OpenText™ | 6.9 | Jan 30 | Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2025-11884 | UC uCMDB OpenText™ | 2.3 | Nov 19 | Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB |
| CVE-2025-8050 | FL Flipper opentext | 6.5 | Oct 21 | External Control of File vulnerability has been discovered in opentext Flipper. |
| CVE-2025-8052 | FL Flipper opentext | 8.8 | Oct 20 | HQL Injection vulnerability has been discovered in Opentext Flipper. |
| CVE-2025-8048 | FL Flipper opentext | 6.5 | Oct 20 | External Control of File path vulnerability has been discovered on Openext Flipper. |
| CVE-2025-8049 | FL Flipper opentext | 8.8 | Oct 20 | Insufficient Access Control vulnerability has been discovered in OpenText Flipper. |
| CVE-2025-8051 | FL Flipper opentext | 6.5 | Oct 20 | Path traversal validation vulnerability has been discovered in opentext Flipper. |
| CVE-2025-8053 | FL Flipper opentext | 9.1 | Oct 20 | Insufficient access control vulnerability has been discovered in Opentext Flipper. |
| CVE-2025-8716 | OC OpenText Content Management OpenText | 5.8 | Sep 11 | Cache exploitation vulnerability |
| CVE-2025-5808 | SS Self Service Password Reset OpenText | 7.3 | Aug 29 | Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset |
| CVE-2025-3478 | OE OpenText Enterprise Security Manager OpenText | 8.5 | Aug 25 | OpenText Enterprise Security Manager Stored XSS |
| CVE-2025-8997 | OE OpenText Enterprise Security Manager OpenText | 5.7 | Aug 25 | OpenText Enterprise Security Manager Information Exposure |
| CVE-2025-8616 | AA Advanced Authentication OpenText | 6.1 | Aug 6 | Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication |
| CVE-2024-7650 | DS Directory Services OpenText™ | 6.3 | Jul 10 | Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4 |
| CVE-2025-0885 | GR GroupWise OpenText™ | 1.8 | Jul 3 | Incorrect Authorization vulnerability affects OpenText™ GroupWise |
| CVE-2025-2236 | AA Advanced Authentication OpenText | 2.1 | May 27 | Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication. |
| CVE-2024-10865 | AA Advance Authentication OpenText | 9.4 | May 14 | Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication |
| CVE-2024-10864 | AA Advance Authentication OpenText | 7.5 | May 14 | SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication. |
| CVE-2025-3272 | OB Operations Bridge Manager OpenText™ | 6.7 | May 7 | Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager. |
| CVE-2025-3476 | OB Operations Bridge Manager OpenText™ | 9.4 | May 7 | Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager |
| CVE-2024-12706 | DA Digital Asset Management. OpenText™ | 2.1 | Apr 28 | SQL Injection vulnerability discovered in OpenText™ Digital Asset Management. |
| CVE-2024-12543 | OC OpenText Content Management OpenText | 5.9 | Apr 21 | A user enumeration and subsequent data integrity vulnerability affecting barcode functionality |
| CVE-2024-12863 | OC OpenText Content Management OpenText | 5.7 | Apr 21 | Stored XSS in Discussions functionality |
| CVE-2025-2517 | AE ArcSight Enterprise Security Manager OpenText | 2.3 | Apr 21 | Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager |
| CVE-2024-12862 | CS Content Server OpenText | 5.5 | Apr 21 | REST API allows users without permissions to remove external collaborators |
| CVE-2024-12530 | SC Secure Content Manager OpenText | 7.0 | Apr 17 | Insecure Dynamic-Link Library (DLL) Load vulnerability |
| CVE-2022-26323 | UC UCMDB ( Classic and Containerized) OpenText™ | 8.7 | Apr 17 | Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product. |
| CVE-2025-0883 | SM Service Manager OpenText™ | 2.1 | Mar 12 | vulnerability has been discovered in OpenText™ Service Manager. |
| CVE-2025-0884 | SM Service Manager OpenText™ | 7.3 | Mar 12 | Privilege Escalation vulnerability has been discovered in OpenText™ Service Manager. |
| CVE-2024-12799 | IM Identity Manager Advanced Edition OpenText | 10.0 | Mar 5 | Insufficiently Protected Credentials |
| CVE-2024-8125 | CM Content Management (Extended ECM) OpenText™ | 5.4 | Feb 4 | A remote code vulnerability has been discovered in OpenText™ Content Management. |
| CVE-2024-7085 | SB Solutions Business Manager (SBM) OpenText™ | 8.2 | Jan 15 | Exposure of private information vulnerability has been discovered in OpenText™ Solutions Business Manager (SBM). |
| CVE-2024-12111 | PA Privileged Access Manager OpenText | 8.0 | Dec 19 | Potential LDAP injection vulnerability in OpenText Privileged Access Manager |
| CVE-2021-22501 | OB Operations Bridge Manager OpenText™ | 5.3 | Dec 19 | Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited… |
| CVE-2019-17082 | AC AccuRev OpenText™ | 9.0 | Nov 26 | Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass |