OpenText vulnerabilities

CVEs per yearBy the year they were published

1. 202136
2. 20234
3. 202482
4. 202520
5. 202615

Newest CVEs

• CVE-2026-18159

  A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS):…

  OpenText · OpenText Directory Services (OTDS)

  Medium5.3
• CVE-2026-76580

  Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows…

  OpenText · OpenText Directory Services (OTDS)

  Medium6.3
• CVE-2026-19134

  A vulnerability in OpenText OpenText Directory Services (OTDS) allows Black Box Reverse Engineering. This issue affects OpenText Directory Services (OTDS):…

  OpenText · OpenText Directory Services (OTDS)

  High7.1
• CVE-2026-1339

  Open redirect vulnerability - UCMDB/Operations Bridge Manager

  OpenText · Universal Discovery and CMDB

  Medium5.1
• CVE-2026-112256

  Logon bypass (trust of attacker-controlled completed-methods list)

  OpenText · Advanced Authentication Server

  Critical9.2
• CVE-2026-112255

  Endpoint credential minting (insecure default allow-list)

  OpenText · Advanced Authentication Server

  Low2.9
• CVE-2026-75120

  Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

  OpenText · Endpoint Investigator

  Critical9.3
• CVE-2025-15591

  Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content Management

  OpenText · Content Management

  Medium5.3
• CVE-2026-12559

  Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application

  OpenText · Vendor Invoice Management for SAP Solutions

  High7.3
• CVE-2026-13202

  HTML Injection in OTDS Swagger UI

  OpenText · Opentext Directory Services

  High7.3