Lucene search
K

1938 matches found

CNNVD
CNNVD
added 2025/05/14 12:0 a.m.1 views

OpenText Advance Authentication SQL注入漏洞

OpenText Advance Authentication is an enterprise-grade multi-factor authentication MFA and identity management platform from OpenText Canada that supports a zero-trust architecture. An SQL injection vulnerability exists in OpenText Advance Authentication versions prior to 6.5, which stems from...

7.5CVSS8AI score0.00226EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/14 12:0 a.m.1 views

OpenText Advance Authentication 跨站脚本漏洞

OpenText Advance Authentication is an enterprise-grade multi-factor authentication MFA and identity management platform from OpenText Canada that supports a zero-trust architecture. A cross-site scripting vulnerability exists in OpenText Advance Authentication versions prior to 6.5, which stems...

9.4CVSS6.2AI score0.00224EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 7:23 p.m.11 views

CVE-2025-3476

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...

9.4CVSS7.1AI score0.00237EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 7:23 p.m.13 views

CVE-2025-3272

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4...

6.7CVSS6.8AI score0.001EPSS
Exploits0References1
NVD
NVD
added 2025/05/07 7:16 p.m.14 views

CVE-2025-3476

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...

9.4CVSS0.00237EPSS
Exploits0References1
NVD
NVD
added 2025/05/07 7:16 p.m.10 views

CVE-2025-3272

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allow authenticated users to change their password without providing their old password. This issue affects Operations Bridge Manager: 24.2, 24.4...

6.7CVSS0.001EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 6:42 p.m.51 views

CVE-2025-3272

OpenText Operations Bridge Manager is affected by CVE-2025-3272. The issue is an Incorrect Authorization vulnerability where authenticated users can change their own password without providing the current password. Affected versions are 24.2 and 24.4. According to the sources, the vulnerability p...

6.7CVSS6.5AI score0.001EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 6:42 p.m.7 views

CVE-2025-3476

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...

9.4CVSS7.4AI score0.00237EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 6:42 p.m.53 views

CVE-2025-3476

CVE-2025-3476 targets OpenText Operations Bridge Manager with an Incorrect Authorization flaw that could allow privilege escalation by authenticated users. Affected versions include 2023.05, 23.4, 24.2, and 24.4. Root cause and impact: improper authorization controls enable elevated access for an...

9.4CVSS6.8AI score0.00237EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/07 6:42 p.m.13 views

CVE-2025-3476

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...

9.4CVSS0.00237EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.1 views

OpenText Operations Bridge Manager 安全漏洞

OpenText Operations Bridge Manager is an enterprise activity and performance management software from OpenText Canada. A security vulnerability exists in OpenText Operations Bridge Manager versions 2023.05, 23.4, 24.2, and 24.4, which stems from improper authorization and could result in elevated...

9.4CVSS6.6AI score0.00237EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/07 12:0 a.m.3 views

PT-2025-20291 · Opentext · Opentext Operations Bridge Manager

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 2023.05, 23.4, 24.2, 24.4 Description: The issue is related to an Incorrect Authorization vulnerability that could allow privilege escalation by authenticated users. Recommendations: For versions...

9.4CVSS6.3AI score0.00237EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/05/07 12:0 a.m.3 views

PT-2025-20290 · Opentext · Opentext Operations Bridge Manager

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 24.2 through 24.4 Description: The issue allows authenticated users to change their password without providing their old password. Recommendations: For versions 24.2 and 24.4, update to a version th...

6.7CVSS6.2AI score0.001EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.3 views

OpenText Operations Bridge Manager 安全漏洞

OpenText Operations Bridge Manager is an enterprise activity and performance management software from OpenText Canada. A security vulnerability exists in OpenText Operations Bridge Manager versions 24.2 and 24.4, which stems from improper authorization and could result in an authenticated user...

6.7CVSS6.7AI score0.001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/30 6:9 p.m.6 views

CVE-2024-12706

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue affects Digital Asset Management.:...

2.1CVSS7.7AI score0.0013EPSS
Exploits0References1
NVD
NVD
added 2025/04/28 6:15 p.m.15 views

CVE-2024-12706

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue affects Digital Asset Management.:...

2.1CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/28 5:59 p.m.15 views

CVE-2024-12706 SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue affects Digital Asset Management.:...

2.1CVSS7.3AI score0.0013EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/28 5:59 p.m.19 views

CVE-2024-12706 SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenText™ Digital Asset Management. T he vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. This issue affects Digital Asset Management.:...

2.1CVSS0.0013EPSS
Exploits0References1
CVE
CVE
added 2025/04/28 5:59 p.m.827 views

CVE-2024-12706

CVE-2024-12706 describes an SQL Injection in OpenText Digital Asset Management. An authenticated user could cause arbitrary SQL commands to execute against the underlying database due to improper input handling. Affected products include Digital Asset Management up to version 24.4. Reported data ...

2.1CVSS7.3AI score0.0013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.3 views

PT-2025-18099 · Opentext · Openasset Digital Asset Management

Name of the Vulnerable Software and Affected Versions: OpenText Digital Asset Management versions through 24.4 Description: The issue is related to an SQL Injection vulnerability, which could allow an authenticated user to run arbitrary SQL commands on the underlying database. This problem affect...

2.1CVSS7.4AI score0.0013EPSS
Exploits0References6
Rows per page
Query Builder