CVE-2023-38534

OpenText Exceed Turbo X (versions 12.5.0 and 12.5.1) contains an improper authentication vulnerability that could disclose restricted information via unauthenticated RPC. The CVE-2023-38534 entry is supported by multiple feeds (NVD, Red Hat, PRION, etc.) with CVSS v3.1 base scores of 7.5 (AV:N/PR...

CVE-2023-38535

CVE-2023-38535 affects OpenText Exceed Turbo X versions 12.5.1 and 12.5.2. Root cause is hard-coded cryptographic keys, potentially allowing compromise of keys and impacting confidentiality, integrity, and availability. Publicly documented CVSSv3.1 metrics indicate a 9.8 (CRITICAL) score via netw...

CVE-2023-38536

OpenText Exceed Turbo X (version 12.5.1) contains an HTML injection vulnerability that can lead to Cross‑Site Scripting (XSS). The issue affects the OpenText Exceed Turbo X component and is described in multiple sources (e.g., CVE-2023-38536 entries across NVD, RH advisories, and CNNVD). The avai...