PatchTheCVEopentext vulnerabilities
Recent CVEs affecting opentext products. 11 tracked.
opentext has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-18. Highest priority: CVE-2026-3266 (score 48/100).
- CVE-2025-8053 CRITICAL 9.1 DOWNGRADE Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Con
- CVE-2025-8052 HIGH 8.8 DOWNGRADE SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low pr
- CVE-2025-8049 HIGH 8.8 DOWNGRADE Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Con
- CVE-2025-8051 MEDIUM 6.5 DOWNGRADE Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could all
- CVE-2025-8048 MEDIUM 6.5 DOWNGRADE External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal
- CVE-2025-8050 MEDIUM 6.5 DOWNGRADE External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerabi
- CVE-2026-3278 MEDIUM 6.1 DOWNGRADE Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText
- CVE-2026-3266 CRITICAL 9.8 UPGRADE Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could al
- CVE-2025-12455 HIGH 7.5 UPGRADE Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing. The vulner
- CVE-2025-12454 MEDIUM 6.1 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText
- CVE-2025-12453 MEDIUM 6.1 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText
FAQ
How do I fix opentext vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opentext being exploited right now?
None of the tracked opentext CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opentext CVE should I patch first?
CVE-2026-3266 currently ranks highest (48/100): Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could al.