Skip to content
Noroxi

OpenText records

137 published records for vendor opentext.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
2.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 21
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

137 records
  • CVE-2017-5586
    47Plan

    OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java

    CriticalCVSS 9.8Proof of conceptEPSS 25%

    opentext · documentum d2Feb 22, 2017

  • CVE-2022-45926
    40Plan

    An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803).

    HighCVSS 8.8No exploitEPSS 17%

    opentext · opentext extended ecmJan 18, 2023

  • CVE-2016-2002
    40Plan

    The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x b

    CriticalCVSS 9.8No exploitEPSS 3%

    opentext · verticaApr 20, 2016

  • CVE-2017-5802
    40Plan

    A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found.

    CriticalCVSS 9.8No exploitEPSS 2%

    opentext · verticaFeb 15, 2018

  • CVE-2017-14759
    39Monitor

    OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well)

    CriticalCVSS 9.8No exploitEPSS 1%

    opentext · document sciences xpressionOct 2, 2017

  • CVE-2024-1147
    39Monitor

    Weak Access Control - Arbitrary file download

    CriticalCVSS 9.8No exploitEPSS 1%

    opentext · pvcs version managerMar 21, 2024

  • CVE-2024-1148
    39Monitor

    Weak Access Control - Arbitrary file upload

    CriticalCVSS 9.8No exploitEPSS 1%

    opentext · pvcs version managerMar 21, 2024

  • CVE-2022-35898
    39Monitor

    OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation.

    CriticalCVSS 9.8No exploitEPSS 1%

    opentext · bizmanagerMay 1, 2023

  • CVE-2024-1811
    39Monitor

    OpenText ArcSight Platform Remote Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    opentext · arcsight platformMar 20, 2024

  • CVE-2023-7248
    39Monitor

    OpenText Vertica Management console might be prone to bypass via crafted requests

    CriticalCVSS 9.8No exploitEPSS 0%

    opentext · verticaMar 15, 2024

  • CVE-2023-38535
    39Monitor

    Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2.

    CriticalCVSS 9.8No exploitEPSS 0%

    opentext · exceed turboxMar 13, 2024

  • CVE-2024-6359
    39Monitor

    Privilege escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    opentext · arcsight intelligenceAug 6, 2024

  • CVE-2017-15276
    38Monitor

    OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an a

    HighCVSS 8.8Proof of conceptEPSS 9%

    opentext · documentum content serverOct 13, 2017

  • CVE-2017-15012
    37Monitor

    OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE

    HighCVSS 8.8Proof of conceptEPSS 8%

    opentext · documentum content serverOct 13, 2017

  • CVE-2017-15013
    37Monitor

    OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an a

    HighCVSS 8.8Proof of conceptEPSS 7%

    opentext · documentum content serverOct 13, 2017

  • CVE-2017-7221
    36Monitor

    OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to

    HighCVSS 8.8Proof of conceptEPSS 4%

    opentext · documentum content serverApr 25, 2017

  • CVE-2017-14758
    36Monitor

    OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well)

    HighCVSS 8.8Proof of conceptEPSS 3%

    opentext · document sciences xpressionOct 2, 2017

  • CVE-2017-7220
    36Monitor

    OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an unauthorized "UPDATE

    HighCVSS 8.8No exploitEPSS 2%

    opentext · documentum content serverApr 20, 2017

  • CVE-2017-5585
    36Monitor

    OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row

    HighCVSS 8.8No exploitEPSS 2%

    opentext · documentum content serverFeb 22, 2017

  • CVE-2017-14757
    36Monitor

    OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well)

    HighCVSS 8.8Proof of conceptEPSS 2%

    opentext · document sciences xpressionOct 2, 2017

  • CVE-2022-45923
    36Monitor

    An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803).

    HighCVSS 8.8No exploitEPSS 2%

    opentext · opentext extended ecmJan 18, 2023

  • CVE-2022-45927
    36Monitor

    An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803).

    HighCVSS 8.8No exploitEPSS 2%

    opentext · opentext extended ecmJan 18, 2023

  • CVE-2022-45928
    36Monitor

    A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803).

    HighCVSS 8.8No exploitEPSS 2%

    opentext · opentext extended ecmJan 18, 2023

  • CVE-2019-17082
    36Monitor

    Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass.

    CriticalCVSS 9.0No exploitEPSS 0%

    opentext™ · accurevNov 26, 2024

  • CVE-2022-45925
    35Monitor

    An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803).

    HighCVSS 7.5No exploitEPSS 17%

    opentext · opentext extended ecmJan 18, 2023