OpenText™ Vulnerabilities and Affected Products
Vulnerabilities associated with Exceed Turbo X.
Products
Clear product- Vertica5 vulnerabilities
- Operations Bridge Manager4 vulnerabilities
- Directory Services3 vulnerabilities
- Exceed Turbo X3 vulnerabilities
- Web Site Management Server3 vulnerabilities
- Asset Management X (AMX)2 vulnerabilities
- Filr2 vulnerabilities
- Network Node Manager i (NNMi)2 vulnerabilities
- Service Management Automation X (SMAX)2 vulnerabilities
- Service Manager2 vulnerabilities
- XM Fax2 vulnerabilities
- AccuRev1 vulnerability
- ALM Octane Management1 vulnerability
- ALM Octane.1 vulnerability
- Application Lifecycle Management (ALM),Quality Center1 vulnerability
- Carbonite Safe Server Backup1 vulnerability
- Content Management (Extended ECM)1 vulnerability
- CX-E Voice1 vulnerability
- Digital Asset Management.1 vulnerability
- Documentum™ Server1 vulnerability
- GroupWise1 vulnerability
- Hybrid Cloud Management X (HCMX)1 vulnerability
- Operations Agent1 vulnerability
- Operations Bridge Suite (Containerized)1 vulnerability
- Solutions Business Manager (SBM)1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-38536MEDIUM | HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting. CWE-79Mar 13, 2024 | CVSS6.4v3.1 | EPSS0.366% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-38535MEDIUM | Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise the cryptographic keys. | CVSS4.7v3.1 | EPSS0.273% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-38534HIGH | Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of restricted information in unauthenticated RPC. CWE-287Mar 13, 2024 | CVSS8.6v3.1 | EPSS0.498% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |