Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,855All CVEsplus 19,116 rejected
- 449Last 24 hours2,911 in the last 7 days
- 16,798Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 7 | 5 | 1 | 0 | 15 | 157 |
| 2025 | 2 | 4 | 9 | 5 | 0 | 20 | 142 |
| 2024 | 3 | 39 | 36 | 4 | 0 | 82 | 122 |
| 2023 | 1 | 3 | 0 | 0 | 0 | 4 | 40 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2021 | 0 | 33 | 0 | 3 | 0 | 36 | 36 |
| Title | ||
|---|---|---|
| CVE-2026-18159 | A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS):…OpenText · OpenText Directory Services (OTDS) | Medium5.3 |
| CVE-2026-76580 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows…OpenText · OpenText Directory Services (OTDS) | Medium6.3 |
| CVE-2026-19134 | A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. This issue affects OpenText Directory Services (OTDS):…OpenText · OpenText Directory Services (OTDS) | High7.1 |
| CVE-2026-1339 | Open redirect vulnerability - UCMDB/Operations Bridge ManagerOpenText · Universal Discovery and CMDB | Medium5.1 |
| CVE-2026-112256 | Logon bypass (trust of attacker-controlled completed-methods list)OpenText · Advanced Authentication Server | Critical9.2 |
| CVE-2026-112255 | Endpoint credential minting (insecure default allow-list)OpenText · Advanced Authentication Server | Low2.9 |
| CVE-2026-75120 | Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE AgentsOpenText · Endpoint Investigator | Critical9.3 |
| CVE-2025-15591 | Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content ManagementOpenText · Content Management | Medium5.3 |
| CVE-2026-12559 | Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation ApplicationOpenText · Vendor Invoice Management for SAP Solutions | High7.3 |
| CVE-2026-13202 | HTML Injection in OTDS Swagger UIOpenText · Opentext Directory Services | High7.3 |
| CVE-2026-11877 | Missing Authorization Vulnerability in OpenText Access ManagerOpenText · Access Manager | Medium6.3 |
| CVE-2026-11878 | Reflected Cross-Site Scripting vulnerability in OpenText Access ManagerOpenText · Access Manager | High8.2 |
| CVE-2026-2123 | Privilege escalation vulnerability in Operations AgentOpenText · Operations Agent | High8.6 |
| CVE-2024-11604 | Insertion of Sensitive Information into Log FileOpenText · IDM Driver and Extensions | High7.3 |
| CVE-2025-13478 | Cache Misconfiguration Leading to Cross-User Data ExposureOpenText · Identity Manager | High8.4 |
| CVE-2025-8050 | External Control of File vulnerability has been discovered in opentext Flipper.opentext · Flipper | Medium5.3 |
| CVE-2025-8052 | HQL Injection vulnerability has been discovered in Opentext Flipper.opentext · Flipper | Low1.0 |
| CVE-2025-8048 | External Control of File path vulnerability has been discovered on Openext Flipper.opentext · Flipper | Medium5.3 |
| CVE-2025-8049 | Insufficient Access Control vulnerability has been discovered in OpenText Flipper.opentext · Flipper | Low2.3 |
| CVE-2025-8051 | Path traversal validation vulnerability has been discovered in opentext Flipper.opentext · Flipper | Medium5.3 |
| CVE-2025-8053 | Insufficient access control vulnerability has been discovered in Opentext Flipper.opentext · Flipper | Low1.0 |
| CVE-2025-8716 | Cache exploitation vulnerabilityOpenText · OpenText Content Management | Medium5.8 |
| CVE-2025-5808 | Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password ResetOpenText · Self Service Password Reset | High7.3 |
| CVE-2025-3478 | OpenText Enterprise Security Manager Stored XSSOpenText · OpenText Enterprise Security Manager | High8.5 |
| CVE-2025-8997 | OpenText Enterprise Security Manager Information ExposureOpenText · OpenText Enterprise Security Manager | Medium5.7 |
| CVE-2025-8616 | Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced AuthenticationOpenText · Advanced Authentication | Medium6.1 |
| CVE-2025-2236 | Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.OpenText · Advanced Authentication | Low2.1 |
| CVE-2024-10865 | Reflected Cross-Site Scripting vulnerability in OpenText Advanced AuthenticationOpenText · Advance Authentication | Critical9.4 |
| CVE-2024-10864 | SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.OpenText · Advance Authentication | High7.5 |
| CVE-2024-12543 | A user enumeration and subsequent data integrity vulnerability affecting barcode functionalityOpenText · OpenText Content Management | Medium5.9 |
| CVE-2024-12863 | Stored XSS in Discussions functionalityOpenText · OpenText Content Management | Medium5.6 |
| CVE-2025-2517 | Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security ManagerOpenText · ArcSight Enterprise Security Manager | Low2.3 |
| CVE-2024-12862 | REST API allows users without permissions to remove external collaboratorsOpenText · Content Server | Medium5.5 |
| CVE-2024-12530 | Insecure Dynamic-Link Library (DLL) Load vulnerabilityOpenText · Secure Content Manager | High7.0 |
| CVE-2024-12799 | Insufficiently Protected CredentialsOpenText · Identity Manager Advanced Edition | Critical10.0 |
| CVE-2024-12111 | Potential LDAP injection vulnerability in OpenText Privileged Access ManagerOpenText · Privileged Access Manager | High8.0 |
| CVE-2024-10863 | Client-side audit exclusion vulnerabilityOpenText · Secure Content Manager | Medium5.1 |
| CVE-2021-38116 | Possible Command injection Vulnerability in OpenText iManagerOpenText · iManager | High8.8 |
| CVE-2021-38117 | Possible Remote Code Execution Vulnerability OpenText iManagerOpenText · iManager | High8.8 |
| CVE-2021-38118 | Possible Local Privilege Escalation Vulnerability in OpenText iManagerOpenText · iManager | Medium5.5 |
| CVE-2021-38119 | Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManagerOpenText · iManager | Medium6.1 |
| CVE-2021-38134 | Possible Reflected and Stored XSS in OpenText iManagerOpenText · iManager | Medium6.1 |
| CVE-2021-38135 | Possible External service interaction Vulnerability in OpenText iManagerOpenText · iManager | High8.6 |
| CVE-2022-26324 | Possible XSS in iManager URL for access ComponentOpenText · iManager | High7.6 |
| CVE-2023-24466 | Possible XML External Entity Injection in OpenText iManagerOpenText · iManager | High7.5 |
| CVE-2023-24467 | Possible Command Injection in OpenText iManagerOpenText · iManager | High8.8 |
| CVE-2024-9841 | OpenText ArcSight Management Center and ArcSight Platform Stored XSSOpenText · ArcSight Management Center | High7.0 |
| CVE-2020-11859 | Potential Cross Site Scripting vulnerability in OpenText iManagerOpenText · iManager | High7.6 |
| CVE-2024-4692 | Multiple missing permission checksOpenText · OpenText Application Automation Tools | Low1.8 |
| CVE-2024-4690 | Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation ToolsOpenText · OpenText Application Automation Tools | Medium5.1 |