CVE-2023-32260: A potential Misinterpretation of Input…

Record summary

CVE-2023-32260 has a selected CVSS score of 6.5 (medium).

Description

Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 19, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Asset Management X (AMX) Browse OpenText™ / Asset Management X (AMX) Default status: unaffected	CVE List	2021.08	affected
		2021.11	affected
		2022.05	affected
		2022.11	affected
		2023.05	affected
Hybrid Cloud Management X (HCMX) Browse OpenText™ / Hybrid Cloud Management X (HCMX) Default status: unaffected	CVE List	2020.05	affected
		2020.08	affected
		2020.11	affected
		2021.02	affected
		2021.05	affected
		2021.08	affected
		2021.11	affected
		2022.05	affected
		2022.11	affected
		2023.05	affected
Service Management Automation X (SMAX) Browse OpenText™ / Service Management Automation X (SMAX) Default status: unaffected	CVE List	2020.05	affected
		2020.08	affected
		2020.11	affected
		2021.02	affected
		2021.05	affected
		2021.08	affected
		2021.11	affected
		2022.05	affected
		2022.11	affected
		2023.05	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2023-32260

portal.microfocus.com

https://portal.microfocus.com/s/article/KM000018804?language=en_US