PT-2025-23005 · Opentext · Opentext Advance Authentication

Name of the Vulnerable Software and Affected Versions: OpenText Advanced Authentication versions prior to 6.5 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, potentially revealing sensitive information during the management and configurati...

CVE-2025-2236: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced...

OpenText Advanced Authentication 安全漏洞

OpenText Advanced Authentication is an advanced authentication framework from OpenText Canada. A security vulnerability exists in OpenText Advanced Authentication versions prior to 6.5 that stems from the potential disclosure of sensitive information...

CVE-2023-24468

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2...

CVE-2024-10864

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10865

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10865 Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10865 Reflected Cross-Site Scripting vulnerability in OpenText Advanced Authentication

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10865

CVE-2024-10865 affects OpenText Advanced Authentication prior to 6.5. The issue arises from improper input validation, enabling Cross-site Scripting (XSS). Affected component is OpenText Advanced Authentication; root cause is input validation failure leading to XSS. Impact is consistent with high...

CVE-2024-10864

OpenText Advanced Authentication (OpenText Advance Authentication) contains an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. Affected versions are prior to 6.5. The issue can lead to improper query handling that could impact confidentiality, integ...

CVE-2024-10864 SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10864 SQL Injection vulnerability has been discovered in OpenText™ Advanced Authentication.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10865: Improper Neutralization of Input During Web Page Generation

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

CVE-2024-10864: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText Advanced Authentication. This issue affects Advanced Authentication versions before 6.5...

Unspecified Vulnerability in NetIQ Advanced Authentication (CNVD-2024-38199)

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A security vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which can be exploited by an...

Unspecified Vulnerability in NetIQ Advanced Authentication (CNVD-2024-38198)

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A security vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1 that stems from an insufficien...

NetIQ Advanced Authentication Command Execution Vulnerability

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A command execution vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which can be exploit...

NetIQ Advanced Authentication Information Disclosure Vulnerability

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. An information disclosure vulnerability exists in NetIQ Advance Authentication versions prior to 6.3.5.1, which can be...

NetIQ Advanced Authentication Cross-Site Scripting Vulnerability

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A cross-site scripting vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which stems from ...

NetIQ Advanced Authentication Brute Force Vulnerability

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A brute force vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which stems from not...