CVE-2020-11846

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846 Improper handling of token allows access to restricted resource in Privileged Access Manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11846

OpenText Privileged Access Manager before 3.7.0.1 is affected by CVE-2020-11846. The issue arises from the Token Handler, where issuing a token also sets a cookie that grants unrestricted access to all application resources. This represents improper privilege management and can enable remote expl...

CVE-2020-11846 Improper handling of token allows access to restricted resource in Privileged Access Manager

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

CVE-2020-11850

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting XSS. This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6...

CVE-2020-11850

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting XSS. This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6...

CVE-2020-11850 Cross site scripting vulnerability in Self Service Password Reset

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting XSS. This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6...

CVE-2020-11850

CVE-2020-11850 relates to an Improper Input Validation vulnerability in OpenText Self Service Password Reset that enables Cross-Site Scripting (XSS). The connected PT-security entry confirms affected versions: OpenText Self Service Password Reset prior to 4.5.0.2 and prior to 4.4.0.6. The root ca...

CVE-2020-11850 Cross site scripting vulnerability in Self Service Password Reset

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting XSS. This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6...

PT-2024-11542 · Opentext · Opentext Performance Center

Name of the Vulnerable Software and Affected Versions: OpenText Performance Center version 12.63 Description: The issue allows exposure of sensitive information to an unauthorized actor, enabling the retrieval of embedded sensitive data. Recommendations: For OpenText Performance Center version...

CVE-2022-26328: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OpenText Performance Center on Windows allows Cross-Site Scripting XSS.This issue affects Performance Center: 12.63...

CVE-2022-26327: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63...

CVE-2020-11850: Improper Input Validation

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting XSS. This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6...

PT-2024-11543 · Opentext · Opentext Performance Center

Name of the Vulnerable Software and Affected Versions: OpenText Performance Center version 12.63 Description: The issue affects OpenText Performance Center on Windows, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations: For OpenTe...

CVE-2020-11846: Improper Privilege Management

A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...

OpenText NetIQ Privileged Account Manager 安全漏洞

OpenText NetIQ Privileged Account Manager is a customer management software from OpenText Canada. A security vulnerability exists in OpenText NetIQ Privileged Account Manager versions prior to 3.7.0.1, which originates from a cookie that is set when a token is successfully issued, which allows...

OpenText Performance Center 安全漏洞

OpenText Performance Center is a performance center from OpenText Canada. A security vulnerability exists in OpenText Performance Center version 12.63 that stems from the presence of a stored cross-site scripting vulnerability that allows cross-site scripting attacks...

PT-2024-10767 · Opentext · Opentext Self Service Password Reset

Name of the Vulnerable Software and Affected Versions: OpenText Self Service Password Reset versions prior to 4.5.0.2 OpenText Self Service Password Reset versions prior to 4.4.0.6 Description: The issue is related to an Improper Input Validation vulnerability that allows Cross-Site Scripting XSS...

OpenText NetIQ Privileged Account Manager 安全漏洞

OpenText NetIQ Privileged Account Manager is a customer management software from OpenText Canada. A security vulnerability exists in OpenText NetIQ Privileged Account Manager versions prior to 3.7.0.1, which originates from an SSH-authenticated user being able to access the PAM server and execute...