Lucene search
K

1938 matches found

CVE
CVE
added 2024/11/06 2:10 p.m.48 views

CVE-2020-11859

OpenText iManager CVE-2020-11859 is an Improper Input Validation vulnerability that enables Cross-Site Scripting (XSS) and affects iManager before 3.2.3. The vulnerability is documented across multiple sources (NVD, Red Hat) with the same affected condition: iManager versions prior to 3.2.3. The ...

7.6CVSS6.1AI score0.00202EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/10/28 7:15 p.m.16 views

CVE-2024-5532

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system...

4.8CVSS0.00238EPSS
Exploits0References1
CVE
CVE
added 2024/10/28 6:52 p.m.41 views

CVE-2024-5532

CVE-2024-5532 is a stored XSS vulnerability in OpenText OpenText Operations Agent. The issue allows an attacker with local admin privileges to manipulate the content of the agent’s internal status page on the local system. Affected versions are 12.20–12.26. The connected sources reiterate the sam...

4.8CVSS5.7AI score0.00238EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/28 6:52 p.m.13 views

CVE-2024-5532 A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system...

1.8CVSS0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 6:52 p.m.9 views

CVE-2024-5532 A stored XSS vulnerability has been discovered on OpenText™ Operations Agent (OA).

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local admin permissions to manipulate the content of the internal status page of the Agent on the local system...

1.8CVSS6AI score0.00238EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.2 views

OpenText Operations Agent 安全漏洞

OpenText Operations Agent is a software from OpenText Canada that is used to manage and monitor OpenText products and solutions. A security vulnerability exists in OpenText Operations Agent, which is caused by improper input neutralization during web page generation and is susceptible to cross-si...

4.8CVSS6AI score0.00238EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.4 views

PT-2024-36507 · Opentext · Opentext Operations Agent

Name of the Vulnerable Software and Affected Versions: OpenText Operations Agent versions 12.20 through 12.26 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This could allow an attacker with local admin...

1.8CVSS6.7AI score0.00238EPSS
Exploits0References3
OSV
OSV
added 2024/10/16 5:15 p.m.2 views

CVE-2024-4184

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS5.8AI score0.00135EPSS
Exploits0References1
NVD
NVD
added 2024/10/16 5:15 p.m.21 views

CVE-2024-4211

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation...

2.4CVSS0.0016EPSS
Exploits0References1
OSV
OSV
added 2024/10/16 5:15 p.m.2 views

CVE-2024-4189

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/10/16 5:15 p.m.20 views

CVE-2024-4184

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS0.00135EPSS
Exploits0References1
NVD
NVD
added 2024/10/16 5:15 p.m.16 views

CVE-2024-4189

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS0.00135EPSS
Exploits0References1
OSV
OSV
added 2024/10/16 5:15 p.m.1 views

CVE-2024-4690

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/10/16 5:15 p.m.2 views

CVE-2024-4211

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation...

2.4CVSS5.7AI score
Exploits0References1
NVD
NVD
added 2024/10/16 5:15 p.m.18 views

CVE-2024-4692

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText...

2.4CVSS0.0016EPSS
Exploits0References1
NVD
NVD
added 2024/10/16 5:15 p.m.18 views

CVE-2024-4690

Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below...

8CVSS0.00114EPSS
Exploits0References1
NVD
NVD
added 2024/10/16 5:15 p.m.18 views

CVE-2023-32266

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management ALM,Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation. This issue affects Application Lifecycle Management ALM,Quality Center:...

5.3CVSS0.00076EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/16 4:41 p.m.14 views

CVE-2024-4692 Multiple missing permission checks

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText...

1.8CVSS0.0016EPSS
Exploits0References1
CVE
CVE
added 2024/10/16 4:41 p.m.53 views

CVE-2024-4692

CVE-2024-4692 affects OpenText Application Automation Tools (versions 24.1.0 and below). Root cause: improper validation of input quantity and multiple missing permission checks in the Service Virtualization configuration. Impact: could allow users with Overall/Read permission to enumerate Servic...

2.4CVSS4.9AI score0.0016EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/16 4:41 p.m.14 views

CVE-2024-4692 Multiple missing permission checks

Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText...

1.8CVSS7.1AI score0.0016EPSS
Exploits0References1
Rows per page
Query Builder