OP
Vendor
Opentext
170
CVEs
0
On KEV
5
New 30D
Products
EF9.3
Endpoint Forensics & Response
OpenText
1 CVEs0 on KEV1 new
EI9.3
Endpoint Investigator
OpenText
1 CVEs0 on KEV1 new
ES9.3
Endpoint Security
OpenText
1 CVEs0 on KEV1 new
IA9.3
Information Assurance
OpenText
1 CVEs0 on KEV1 new
CM5.3
Content Management
OpenText
1 CVEs0 on KEV1 new
BD7.8
Brava! Desktop
Opentext
35 CVEs0 on KEV0 new
VE9.8
Vertica
OpenText™
9 CVEs0 on KEV0 new
DC8.8
Documentum Content Server
Opentext
8 CVEs0 on KEV0 new
DS9.8
Document Sciences Xpression
Opentext
7 CVEs0 on KEV0 new
OE8.8
Opentext Extended Ecm
Opentext
7 CVEs0 on KEV0 new
DW8.8
Documentum Webtop
OpenText™
6 CVEs0 on KEV0 new
FL9.1
Flipper
opentext
6 CVEs0 on KEV0 new
AP8.8
Appbuilder
Opentext
5 CVEs0 on KEV0 new
DS9.8
Directory Services
OpenText™
4 CVEs0 on KEV0 new
DA8.8
Documentum Administrator
Opentext
4 CVEs0 on KEV0 new
EO–
Exceed Ondemand
Opentext
4 CVEs0 on KEV0 new
OB9.4
Operations Bridge Manager
OpenText™
4 CVEs0 on KEV0 new
AI9.8
Arcsight Intelligence
Opentext
3 CVEs0 on KEV0 new
DD9.8
Documentum D2
Opentext
3 CVEs0 on KEV0 new
ET9.8
Exceed Turbox
Opentext
3 CVEs0 on KEV0 new
LE–
Livelink Ecm
Opentext
3 CVEs0 on KEV0 new
OC5.9
OpenText Content Management
OpenText
3 CVEs0 on KEV0 new
WS6.5
Web Site Management Server
OpenText™
3 CVEs0 on KEV0 new
AM7.5
Access Manager
OpenText
2 CVEs0 on KEV0 new
AA9.4
Advance Authentication
OpenText
2 CVEs0 on KEV0 new
AA6.1
Advanced Authentication
OpenText
2 CVEs0 on KEV0 new
AO6.1
Alm Octane
Opentext
2 CVEs0 on KEV0 new
BR7.8
Brava!
Opentext
2 CVEs0 on KEV0 new
CS5.5
Content Server
OpenText
2 CVEs0 on KEV0 new
FI9.8
Filr
OpenText™
2 CVEs0 on KEV0 new
FI–
Firstclass
Opentext
2 CVEs0 on KEV0 new
OE8.5
OpenText Enterprise Security Manager
OpenText
2 CVEs0 on KEV0 new
XF7.5
XM Fax
OpenText™
2 CVEs0 on KEV0 new
AC7.1
Archive Center Administration
Opentext
1 CVEs0 on KEV0 new
AE2.3
ArcSight Enterprise Security Manager
OpenText
1 CVEs0 on KEV0 new
BI9.8
Bizmanager
Opentext
1 CVEs0 on KEV0 new
CS8.6
Carbonite Safe Server Backup
OpenText™
1 CVEs0 on KEV0 new
CV7.5
Cx-e Voice
Opentext
1 CVEs0 on KEV0 new
DA2.1
Digital Asset Management.
OpenText™
1 CVEs0 on KEV0 new
GR1.8
GroupWise
OpenText™
1 CVEs0 on KEV0 new
IM8.4
Identity Manager
OpenText
1 CVEs0 on KEV0 new
IM5.5
Identity Manager Azuread Driver
Opentext
1 CVEs0 on KEV0 new
ID7.3
IDM Driver and Extensions
OpenText
1 CVEs0 on KEV0 new
NP7.5
Netiq Privileged Account Manager
Opentext
1 CVEs0 on KEV0 new
OD7.3
Opentext Directory Services
OpenText
1 CVEs0 on KEV0 new
OF–
Opentext Firstclass Desktop Client
Opentext
1 CVEs0 on KEV0 new
OE–
Opentext/ixos Ecm For Sap Netweaver
Opentext
1 CVEs0 on KEV0 new
OP6.1
Opentext Portal
Opentext
1 CVEs0 on KEV0 new
OA7.8
Operations Agent
OpenText
1 CVEs0 on KEV0 new
OB8.7
Operations Bridge Suite (Containerized)
OpenText™
1 CVEs0 on KEV0 new
PA8.0
Privileged Access Manager
OpenText
1 CVEs0 on KEV0 new
SC7.0
Secure Content Manager
OpenText
1 CVEs0 on KEV0 new
SM–
Secure Mft 2013
Opentext
1 CVEs0 on KEV0 new
SM–
Secure Mft 2014
Opentext
1 CVEs0 on KEV0 new
SS7.3
Self Service Password Reset
OpenText
1 CVEs0 on KEV0 new
SA–
Server And Internet Services
Opentext
1 CVEs0 on KEV0 new
TB6.1
Tempo Box
Opentext
1 CVEs0 on KEV0 new
UC2.3
uCMDB
OpenText™
1 CVEs0 on KEV0 new
UC8.7
UCMDB ( Classic and Containerized)
OpenText™
1 CVEs0 on KEV0 new
VI7.3
Vendor Invoice Management for SAP Solutions
OpenText
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75120 | IA Information Assurance OpenText | 9.3 | Oct 13 | Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents |
| CVE-2025-15591 | CM Content Management OpenText | 5.3 | Oct 6 | Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management |
| CVE-2026-12559 | VI Vendor Invoice Management for SAP Solutions OpenText | 7.3 | Sep 24 | Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application |
| CVE-2025-3271 | DW Documentum Webtop OpenText™ | 4.8 | Sep 9 | DOM-based XSS vulnerability in OpenText™ Documentum Webtop |
| CVE-2026-13202 | OD Opentext Directory Services OpenText | 7.3 | Aug 17 | HTML Injection in OTDS Swagger UI |
| CVE-2026-11877 | AM Access Manager OpenText | 7.5 | Jun 24 | Missing Authorization Vulnerability in OpenText Access Manager |
| CVE-2026-11878 | AM Access Manager OpenText | 6.1 | Jun 24 | Reflected Cross-Site Scripting vulnerability in OpenText Access Manager |
| CVE-2026-2123 | OA Operations Agent OpenText | 7.8 | Mar 31 | Privilege escalation vulnerability in Operations Agent |
| CVE-2024-11604 | ID IDM Driver and Extensions OpenText | 7.3 | Mar 27 | Insertion of Sensitive Information into Log File |
| CVE-2025-13478 | IM Identity Manager OpenText | 8.4 | Mar 27 | Cache Misconfiguration Leading to Cross-User Data Exposure |
| CVE-2026-3278 | ZS ZENworks Service Desk OpenText™ | 6.1 | Mar 18 | XSS Vulnerability discovered in OpenText™ ZENworks Service Desk. |
| CVE-2025-12453 | VE Vertica OpenText™ | 6.1 | Mar 13 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2025-12454 | VE Vertica OpenText™ | 6.1 | Mar 13 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2025-12455 | VE Vertica OpenText™ | 7.5 | Mar 13 | Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2026-3266 | FI Filr OpenText™ | 9.8 | Mar 3 | Improper access control vulnerability has been discovered in OpenText™ Filr. |
| CVE-2025-9120 | CS Carbonite Safe Server Backup OpenText™ | 8.6 | Feb 24 | RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup. |
| CVE-2026-1658 | DS Directory Services OpenText™ | 5.3 | Feb 19 | Content spoofing vulnerability discovered in OpenText™ Directory Services |
| CVE-2025-9208 | WS Web Site Management Server OpenText™ | 5.4 | Feb 19 | Stored-XSS vulnerability discovered in OpenText WSM Management Server. |
| CVE-2025-13671 | WS Web Site Management Server OpenText™ | 6.5 | Feb 19 | Cross Site request forgery vulnerability discovered in OpenText WSM Management Server. |
| CVE-2025-13672 | WS Web Site Management Server OpenText™ | 5.4 | Feb 19 | Reflected Cross-Site Scripting discovered in OpenText WSM Management Server. |
| CVE-2025-8054 | XF XM Fax OpenText™ | 7.5 | Feb 19 | Path Traversal vulnerability have been discovered in OpenText™ XM Fax. |
| CVE-2025-8055 | XF XM Fax OpenText™ | 5.3 | Feb 19 | SSRF vulnerability have been discovered in OpenText™ XM Fax |
| CVE-2025-15579 | DS Directory Services OpenText™ | 9.5 | Feb 18 | An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services. |
| CVE-2024-9432 | VE Vertica OpenText™ | 6.9 | Jan 30 | Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica. |
| CVE-2025-11884 | UC uCMDB OpenText™ | 2.3 | Nov 19 | Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB |
| CVE-2025-8050 | FL Flipper opentext | 6.5 | Oct 21 | External Control of File vulnerability has been discovered in opentext Flipper. |
| CVE-2025-8052 | FL Flipper opentext | 8.8 | Oct 20 | HQL Injection vulnerability has been discovered in Opentext Flipper. |
| CVE-2025-8048 | FL Flipper opentext | 6.5 | Oct 20 | External Control of File path vulnerability has been discovered on Openext Flipper. |
| CVE-2025-8049 | FL Flipper opentext | 8.8 | Oct 20 | Insufficient Access Control vulnerability has been discovered in OpenText Flipper. |
| CVE-2025-8051 | FL Flipper opentext | 6.5 | Oct 20 | Path traversal validation vulnerability has been discovered in opentext Flipper. |
| CVE-2025-8053 | FL Flipper opentext | 9.1 | Oct 20 | Insufficient access control vulnerability has been discovered in Opentext Flipper. |
| CVE-2025-8716 | OC OpenText Content Management OpenText | 5.8 | Sep 11 | Cache exploitation vulnerability |
| CVE-2025-5808 | SS Self Service Password Reset OpenText | 7.3 | Aug 29 | Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset |
| CVE-2025-3478 | OE OpenText Enterprise Security Manager OpenText | 8.5 | Aug 25 | OpenText Enterprise Security Manager Stored XSS |
| CVE-2025-8997 | OE OpenText Enterprise Security Manager OpenText | 5.7 | Aug 25 | OpenText Enterprise Security Manager Information Exposure |
| CVE-2025-8616 | AA Advanced Authentication OpenText | 6.1 | Aug 6 | Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication |
| CVE-2024-7650 | DS Directory Services OpenText™ | 6.3 | Jul 10 | Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4 |
| CVE-2025-0885 | GR GroupWise OpenText™ | 1.8 | Jul 3 | Incorrect Authorization vulnerability affects OpenText™ GroupWise |
| CVE-2025-2236 | AA Advanced Authentication OpenText | 2.1 | May 27 | Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication. |
| CVE-2024-10865 | AA Advance Authentication OpenText | 9.4 | May 14 | Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication |
| CVE-2024-10864 | AA Advance Authentication OpenText | 7.5 | May 14 | SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication. |
| CVE-2025-3272 | OB Operations Bridge Manager OpenText™ | 6.7 | May 7 | Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager. |
| CVE-2025-3476 | OB Operations Bridge Manager OpenText™ | 9.4 | May 7 | Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager |
| CVE-2024-12706 | DA Digital Asset Management. OpenText™ | 2.1 | Apr 28 | SQL Injection vulnerability discovered in OpenText™ Digital Asset Management. |
| CVE-2024-12543 | OC OpenText Content Management OpenText | 5.9 | Apr 21 | A user enumeration and subsequent data integrity vulnerability affecting barcode functionality |
| CVE-2024-12863 | OC OpenText Content Management OpenText | 5.7 | Apr 21 | Stored XSS in Discussions functionality |
| CVE-2025-2517 | AE ArcSight Enterprise Security Manager OpenText | 2.3 | Apr 21 | Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager |
| CVE-2024-12862 | CS Content Server OpenText | 5.5 | Apr 21 | REST API allows users without permissions to remove external collaborators |
| CVE-2024-12530 | SC Secure Content Manager OpenText | 7.0 | Apr 17 | Insecure Dynamic-Link Library (DLL) Load vulnerability |
| CVE-2022-26323 | OB Operations Bridge Suite (Containerized) OpenText™ | 8.7 | Apr 17 | Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product. |
| CVE-2024-12111 | PA Privileged Access Manager OpenText | 8.0 | Dec 19 | Potential LDAP injection vulnerability in OpenText Privileged Access Manager |
| CVE-2021-22501 | OB Operations Bridge Manager OpenText™ | 5.3 | Dec 19 | Improper Restriction of XML External Entity Reference vulnerability in OpenText™ Operations Bridge Manager allows Input Data Manipulation. The vulnerability could be exploited… |
| CVE-2024-6360 | VE Vertica Opentext | 9.8 | Oct 2 | Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege Abuse and result in unauthorized access or privileges to Vertica… |
| CVE-2021-22518 | IM Identity Manager Azuread Driver Opentext | 5.5 | Sep 12 | A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file |
| CVE-2023-7260 | CV Cx-e Voice Opentext | 7.5 | Aug 22 | Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4 |
| CVE-2023-7249 | DS Directory Services Opentext | 9.8 | Aug 12 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects… |
| CVE-2024-6359 | AI Arcsight Intelligence Opentext | 9.8 | Aug 6 | Privilege escalation vulnerability identified in OpenText ArcSight Intelligence |
| CVE-2024-6358 | AI Arcsight Intelligence Opentext | 8.8 | Aug 6 | Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence |
| CVE-2024-6357 | AI Arcsight Intelligence Opentext | 8.8 | Aug 6 | Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence |
| CVE-2024-6361 | AO Alm Octane Opentext | 5.4 | Aug 5 | Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane |