Vulnerabilities > Opentext
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-13 | CVE-2023-38534 | Improper Authentication vulnerability in Opentext Exceed Turbox 12.5.0/12.5.1 Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. | 7.5 |
| 2024-03-13 | CVE-2023-38535 | Use of Hard-coded Credentials vulnerability in Opentext Exceed Turbox 12.5.0/12.5.1 Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. | 9.8 |
| 2024-03-13 | CVE-2023-38536 | Cross-site Scripting vulnerability in Opentext Exceed Turbox 12.5.0/12.5.1 HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. | 6.1 |
| 2024-02-15 | CVE-2023-6123 | Cross-site Scripting vulnerability in Opentext ALM Octane Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack. | 6.1 |
| 2024-01-29 | CVE-2023-4550 | Files or Directories Accessible to External Parties vulnerability in Opentext Appbuilder 21.2 Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. | 7.5 |
| 2024-01-29 | CVE-2023-4551 | Unspecified vulnerability in Opentext Appbuilder 21.2 Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. | 8.8 |
| 2024-01-29 | CVE-2023-4552 | Unspecified vulnerability in Opentext Appbuilder 21.2 Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2. | 7.1 |
| 2024-01-29 | CVE-2023-4553 | Unspecified vulnerability in Opentext Appbuilder 21.2 Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2. | 5.3 |
| 2024-01-29 | CVE-2023-4554 | XXE vulnerability in Opentext Appbuilder 21.2 Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them. This issue affects AppBuilder: from 21.2 before 23.2. | 6.5 |
| 2023-05-24 | CVE-2022-41221 | XXE vulnerability in Opentext Archive Center Administration The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. | 7.1 |