Lucene search

K
cvelistOpenTextCVELIST:CVE-2023-7249
HistoryAug 12, 2024 - 3:59 p.m.

CVE-2023-7249

2024-08-1215:59:00
CWE-22
OpenText
www.cve.org
7
opentext
directory services
path traversal
cve-2023-7249
vulnerability

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

ACTIVE

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/SC:H/VI:L/SI:H/VA:L/SA:H/S:N/AU:Y/U:Amber/R:A/V:D/RE:L

EPSS

0.001

Percentile

39.8%

Improper Limitation of a Pathname to a Restricted Directory (β€˜Path Traversal’) vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenText Directory Services",
    "vendor": "OpenText",
    "versions": [
      {
        "lessThan": "24.1",
        "status": "affected",
        "version": "16.4.2",
        "versionType": "date"
      }
    ]
  }
]

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

ACTIVE

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/SC:H/VI:L/SI:H/VA:L/SA:H/S:N/AU:Y/U:Amber/R:A/V:D/RE:L

EPSS

0.001

Percentile

39.8%

Related for CVELIST:CVE-2023-7249