Medium severity · published Oct 16, 2024
CVE-2023-32266
Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation.
This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Application Lifecycle Management (ALM),Quality Center · OpenText™
15.00; 15.01; 15.01 P1; 15.01 P2; 15.01 P3; 15.01 P4; +7 more · source: vendor
AQ
Alm Quality Center · Opentext
15.00; 15.01; 15.01_p1; 15.01_p2; 15.01_p3; 15.01_p4; +7 more · source: CISA
Affected product
AL
Application Lifecycle Management (ALM),Quality Center
OpenText™