OpenText™ Vulnerabilities and Affected Products
Vulnerabilities associated with Directory Services.
Products
Clear product- Vertica5 vulnerabilities
- Operations Bridge Manager4 vulnerabilities
- Directory Services3 vulnerabilities
- Exceed Turbo X3 vulnerabilities
- Web Site Management Server3 vulnerabilities
- Asset Management X (AMX)2 vulnerabilities
- Filr2 vulnerabilities
- Network Node Manager i (NNMi)2 vulnerabilities
- Service Management Automation X (SMAX)2 vulnerabilities
- Service Manager2 vulnerabilities
- XM Fax2 vulnerabilities
- AccuRev1 vulnerability
- ALM Octane Management1 vulnerability
- ALM Octane.1 vulnerability
- Application Lifecycle Management (ALM),Quality Center1 vulnerability
- Carbonite Safe Server Backup1 vulnerability
- Content Management (Extended ECM)1 vulnerability
- CX-E Voice1 vulnerability
- Digital Asset Management.1 vulnerability
- Documentum™ Server1 vulnerability
- GroupWise1 vulnerability
- Hybrid Cloud Management X (HCMX)1 vulnerability
- Operations Agent1 vulnerability
- Operations Bridge Suite (Containerized)1 vulnerability
- Solutions Business Manager (SBM)1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-1658MEDIUM | Content spoofing vulnerability discovered in OpenText™ Directory ServicesUser Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning. The vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially misleading users. This issue affects Directory Services: from 20.4.1 through 25.2. CWE-451Feb 19, 2026 | CVSS5.3v4.0 | EPSS0.242% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-15579CRITICAL | An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.16, from 25.1 before 25.1.9, from 25.2 before 25.2.9, from 25.3 before 25.3.8, from 25.4 before 25.4.5, from 26.1 before 26.1.2. CWE-502Feb 18, 2026 | CVSS9.5v4.0 | EPSS0.328% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-7650MEDIUM | Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4. CWE-94Jul 10, 2025 | CVSS6.3v4.0 | EPSS0.269% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |