Medium severity · published Aug 6, 2025
CVE-2025-8616
Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Advanced Authentication · OpenText
6.5.0 before = < · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8616
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8616
staging.docs.microfocus.com
https://staging.docs.microfocus.com/doc/42/main/advancedauthentication6504
More from Advanced Authentication
2.1
CVE-2025-2236
Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.