Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,893All CVEsplus 19,117 rejected
- 444Last 24 hours2,910 in the last 7 days
- 16,794Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 13 | 13 | 1 | 0 | 31 | 181 |
| 2025 | 3 | 7 | 12 | 9 | 0 | 31 | 150 |
| 2024 | 4 | 45 | 49 | 6 | 0 | 104 | 119 |
| 2023 | 2 | 4 | 8 | 1 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-18159 | A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS):…OpenText · OpenText Directory Services (OTDS) | Medium5.3 |
| CVE-2026-76580 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows…OpenText · OpenText Directory Services (OTDS) | Medium6.3 |
| CVE-2026-19134 | A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. This issue affects OpenText Directory Services (OTDS):…OpenText · OpenText Directory Services (OTDS) | High7.1 |
| CVE-2026-1339 | Open redirect vulnerability - UCMDB/Operations Bridge ManagerOpenText · Universal Discovery and CMDB | Medium5.1 |
| CVE-2026-112256 | Logon bypass (trust of attacker-controlled completed-methods list)OpenText · Advanced Authentication Server | Critical9.2 |
| CVE-2026-112255 | Endpoint credential minting (insecure default allow-list)OpenText · Advanced Authentication Server | Low2.9 |
| CVE-2026-75120 | Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE AgentsOpenText · Endpoint Investigator | Critical9.3 |
| CVE-2025-15591 | Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content ManagementOpenText · Content Management | Medium5.3 |
| CVE-2026-12559 | Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation ApplicationOpenText · Vendor Invoice Management for SAP Solutions | High7.3 |
| CVE-2025-3271 | DOM-based XSS vulnerability in OpenText™ Documentum WebtopOpenText™ · Documentum Webtop | Medium4.8 |
| CVE-2026-13202 | HTML Injection in OTDS Swagger UIOpenText · Opentext Directory Services | High7.3 |
| CVE-2026-11877 | Missing Authorization Vulnerability in OpenText Access ManagerOpenText · Access Manager | Medium6.3 |
| CVE-2026-11878 | Reflected Cross-Site Scripting vulnerability in OpenText Access ManagerOpenText · Access Manager | High8.2 |
| CVE-2025-15610 | The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in…OpenText, Inc · RightFax | Critical9.3 |
| CVE-2026-2123 | Privilege escalation vulnerability in Operations AgentOpenText · Operations Agent | High8.6 |
| CVE-2024-11604 | Insertion of Sensitive Information into Log FileOpenText · IDM Driver and Extensions | High7.3 |
| CVE-2025-13478 | Cache Misconfiguration Leading to Cross-User Data ExposureOpenText · Identity Manager | High8.4 |
| CVE-2026-3278 | XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.OpenText™ · ZENworks Service Desk | High7.4 |
| CVE-2025-12453 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.OpenText™ · Vertica | Medium5.1 |
| CVE-2025-12454 | Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.OpenText™ · Vertica | Medium5.1 |
| CVE-2025-12455 | Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.OpenText™ · Vertica | Medium5.1 |
| CVE-2026-3266 | Improper access control vulnerability has been discovered in OpenText™ Filr.OpenText™ · Filr | High8.3 |
| CVE-2025-9120 | RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.OpenText™ · Carbonite Safe Server Backup | High8.6 |
| CVE-2026-1658 | Content spoofing vulnerability discovered in OpenText™ Directory ServicesOpenText™ · Directory Services | Medium5.3 |
| CVE-2025-9208 | Stored-XSS vulnerability discovered in OpenText WSM Management Server.OpenText™ · Web Site Management Server | High7.5 |
| CVE-2025-13671 | Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.OpenText™ · Web Site Management Server | Medium5.9 |
| CVE-2025-13672 | Reflected Cross-Site Scripting discovered in OpenText WSM Management Server.OpenText™ · Web Site Management Server | High7.0 |
| CVE-2025-8054 | Path Traversal vulnerability have been discovered in OpenText™ XM Fax.OpenText™ · XM Fax | High7.1 |
| CVE-2025-8055 | SSRF vulnerability have been discovered in OpenText™ XM FaxOpenText™ · XM Fax | Medium5.3 |
| CVE-2025-15579 | An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.OpenText™ · Directory Services | Critical9.5 |
| CVE-2024-9432 | Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.OpenText™ · Vertica | Medium6.9 |
| CVE-2025-11884 | Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDBOpenText™ · uCMDB | Low2.3 |
| CVE-2025-8050 | External Control of File vulnerability has been discovered in opentext Flipper.opentext · Flipper | Medium5.3 |
| CVE-2025-8052 | HQL Injection vulnerability has been discovered in Opentext Flipper.opentext · Flipper | Low1.0 |
| CVE-2025-8048 | External Control of File path vulnerability has been discovered on Openext Flipper.opentext · Flipper | Medium5.3 |
| CVE-2025-8049 | Insufficient Access Control vulnerability has been discovered in OpenText Flipper.opentext · Flipper | Low2.3 |
| CVE-2025-8051 | Path traversal validation vulnerability has been discovered in opentext Flipper.opentext · Flipper | Medium5.3 |
| CVE-2025-8053 | Insufficient access control vulnerability has been discovered in Opentext Flipper.opentext · Flipper | Low1.0 |
| CVE-2025-8716 | Cache exploitation vulnerabilityOpenText · OpenText Content Management | Medium5.8 |
| CVE-2025-5808 | Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password ResetOpenText · Self Service Password Reset | High7.3 |
| CVE-2025-3478 | OpenText Enterprise Security Manager Stored XSSOpenText · OpenText Enterprise Security Manager | High8.5 |
| CVE-2025-8997 | OpenText Enterprise Security Manager Information ExposureOpenText · OpenText Enterprise Security Manager | Medium5.7 |
| CVE-2025-8616 | Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced AuthenticationOpenText · Advanced Authentication | Medium6.1 |
| CVE-2024-7650 | Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4OpenText™ · Directory Services | Medium6.3 |
| CVE-2025-0885 | Incorrect Authorization vulnerability affects OpenText™ GroupWiseOpenText™ · GroupWise | Low1.8 |
| CVE-2025-2236 | Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.OpenText · Advanced Authentication | Low2.1 |
| CVE-2024-10865 | Reflected Cross-Site Scripting vulnerability in OpenText Advanced AuthenticationOpenText · Advance Authentication | Critical9.4 |
| CVE-2024-10864 | SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.OpenText · Advance Authentication | High7.5 |
| CVE-2025-3272 | Incorrect user authorization vulnerability has been identified in Open Text Operations Bridge Manager.OpenText™ · Operations Bridge Manager | Medium6.7 |
| CVE-2025-3476 | Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This…OpenText™ · Operations Bridge Manager | Critical9.4 |