OpenText vulnerabilities

CVEs per yearBy the year they were published

1. 202136
2. 20234
3. 202482
4. 202520
5. 202611

Newest CVEs

• CVE-2026-112256

  Logon bypass (trust of attacker-controlled completed-methods list)

  OpenText · Advanced Authentication Server

  Critical9.2
• CVE-2026-112255

  Endpoint credential minting (insecure default allow-list)

  OpenText · Advanced Authentication Server

  Low2.9
• CVE-2026-75120

  Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

  OpenText · Endpoint Investigator

  Critical9.3
• CVE-2025-15591

  Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management

  OpenText · Content Management

  Medium5.3
• CVE-2026-12559

  Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application

  OpenText · Vendor Invoice Management for SAP Solutions

  High7.3
• CVE-2026-13202

  HTML Injection in OTDS Swagger UI

  OpenText · Opentext Directory Services

  High7.3
• CVE-2026-11877

  Missing Authorization Vulnerability in OpenText Access Manager

  OpenText · Access Manager

  Medium6.3
• CVE-2026-11878

  Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

  OpenText · Access Manager

  High8.2
• CVE-2026-2123

  Privilege escalation vulnerability in Operations Agent

  OpenText · Operations Agent

  High8.6
• CVE-2024-11604

  Insertion of Sensitive Information into Log File

  OpenText · IDM Driver and Extensions

  High7.3