https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3278.htmlhttps://patchthecve.com/cve/CVE-2026-3278.htmlWed, 17 Jun 2026 10:43:19 +0000MEDIUM 6.1: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.Thihttps://patchthecve.com/cve/CVE-2025-12455.htmlhttps://patchthecve.com/cve/CVE-2025-12455.htmlWed, 17 Jun 2026 08:32:25 +0000HIGH 7.5: Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulnerability could lead to Password Brute Forcing in Vertica management console application.This issue affects Vertica: from 10.0 through 10.X, from 11.0 through 11.X, from 12.0 through 12.X.https://patchthecve.com/cve/CVE-2025-12454.htmlhttps://patchthecve.com/cve/CVE-2025-12454.htmlWed, 17 Jun 2026 08:32:24 +0000MEDIUM 6.1: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 https://patchthecve.com/cve/CVE-2025-12453.htmlhttps://patchthecve.com/cve/CVE-2025-12453.htmlWed, 17 Jun 2026 08:32:24 +0000MEDIUM 6.1: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vulnerability could lead to Reflected XSS attack of cross-site scripting in Vertica management console application.This issue affects Vertica: from 10.0 https://patchthecve.com/cve/CVE-2026-3266.htmlhttps://patchthecve.com/cve/CVE-2026-3266.htmlWed, 17 Jun 2026 10:43:18 +0000CRITICAL 9.8: Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2.https://patchthecve.com/cve/CVE-2025-8050.htmlhttps://patchthecve.com/cve/CVE-2025-8050.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 6.5: External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal.  The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.https://patchthecve.com/cve/CVE-2025-8053.htmlhttps://patchthecve.com/cve/CVE-2025-8053.htmlThu, 08 Oct 2026 22:10:00 +0000CRITICAL 9.1: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1.2.https://patchthecve.com/cve/CVE-2025-8052.htmlhttps://patchthecve.com/cve/CVE-2025-8052.htmlThu, 08 Oct 2026 22:10:00 +0000HIGH 8.8: SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. This issue affects Flipper: 3.1.2.https://patchthecve.com/cve/CVE-2025-8051.htmlhttps://patchthecve.com/cve/CVE-2025-8051.htmlThu, 08 Oct 2026 22:10:00 +0000MEDIUM 6.5: Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.  The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2.https://patchthecve.com/cve/CVE-2025-8049.htmlhttps://patchthecve.com/cve/CVE-2025-8049.htmlThu, 08 Oct 2026 22:10:00 +0000HIGH 8.8: Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2.https://patchthecve.com/cve/CVE-2025-8048.htmlhttps://patchthecve.com/cve/CVE-2025-8048.htmlThu, 08 Oct 2026 22:10:00 +0000MEDIUM 6.5: External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.https://patchthecve.com/cve/CVE-2023-7260.htmlhttps://patchthecve.com/cve/CVE-2023-7260.htmlThu, 03 Sep 2026 02:15:19 +0000HIGH 7.5: Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system.https://patchthecve.com/cve/CVE-2023-7249.htmlhttps://patchthecve.com/cve/CVE-2023-7249.htmlThu, 03 Sep 2026 02:15:17 +0000CRITICAL 9.8: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1.https://patchthecve.com/cve/CVE-2024-6359.htmlhttps://patchthecve.com/cve/CVE-2024-6359.htmlWed, 17 Jun 2026 08:17:51 +0000MEDIUM 6.4: Privilege escalation vulnerability identified in OpenText ArcSight Intelligence.https://patchthecve.com/cve/CVE-2024-6358.htmlhttps://patchthecve.com/cve/CVE-2024-6358.htmlWed, 17 Jun 2026 08:17:50 +0000MEDIUM 6.3: Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence.https://patchthecve.com/cve/CVE-2024-6357.htmlhttps://patchthecve.com/cve/CVE-2024-6357.htmlWed, 17 Jun 2026 08:17:50 +0000MEDIUM 6.3: Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence.https://patchthecve.com/cve/CVE-2024-6361.htmlhttps://patchthecve.com/cve/CVE-2024-6361.htmlWed, 17 Jun 2026 08:17:51 +0000MEDIUM 5.4: Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. The vulnerability could cause remote code execution attack.https://patchthecve.com/cve/CVE-2024-4187.htmlhttps://patchthecve.com/cve/CVE-2024-4187.htmlWed, 17 Jun 2026 08:01:17 +0000MEDIUM 5.4: Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.https://patchthecve.com/cve/CVE-2023-7248.htmlhttps://patchthecve.com/cve/CVE-2023-7248.htmlWed, 17 Jun 2026 06:52:24 +0000MEDIUM 5.0: Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Conhttps://patchthecve.com/cve/CVE-2023-38536.htmlhttps://patchthecve.com/cve/CVE-2023-38536.htmlWed, 17 Jun 2026 06:10:40 +0000MEDIUM 6.4: HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting.  https://patchthecve.com/cve/CVE-2023-38535.htmlhttps://patchthecve.com/cve/CVE-2023-38535.htmlWed, 17 Jun 2026 06:10:40 +0000MEDIUM 4.7: Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise the cryptographic keys.  https://patchthecve.com/cve/CVE-2023-38534.htmlhttps://patchthecve.com/cve/CVE-2023-38534.htmlWed, 17 Jun 2026 06:10:40 +0000HIGH 8.6: Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of restricted information in unauthenticated RPC. https://patchthecve.com/cve/CVE-2020-11862.htmlhttps://patchthecve.com/cve/CVE-2020-11862.htmlWed, 17 Jun 2026 02:50:56 +0000HIGH 8.6: Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2. https://patchthecve.com/cve/CVE-2023-6123.htmlhttps://patchthecve.com/cve/CVE-2023-6123.htmlTue, 04 Aug 2026 13:17:03 +0000HIGH 7.5: Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack.https://patchthecve.com/cve/CVE-2023-4554.htmlhttps://patchthecve.com/cve/CVE-2023-4554.htmlWed, 17 Jun 2026 06:38:04 +0000MEDIUM 4.9: Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially chttps://patchthecve.com/cve/CVE-2023-4553.htmlhttps://patchthecve.com/cve/CVE-2023-4553.htmlWed, 17 Jun 2026 06:38:04 +0000MEDIUM 5.3: Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2. https://patchthecve.com/cve/CVE-2023-4552.htmlhttps://patchthecve.com/cve/CVE-2023-4552.htmlWed, 17 Jun 2026 06:38:04 +0000MEDIUM 5.5: Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. Thishttps://patchthecve.com/cve/CVE-2023-4551.htmlhttps://patchthecve.com/cve/CVE-2023-4551.htmlWed, 17 Jun 2026 06:38:04 +0000HIGH 7.2: Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating systehttps://patchthecve.com/cve/CVE-2023-4550.htmlhttps://patchthecve.com/cve/CVE-2023-4550.htmlWed, 17 Jun 2026 06:38:04 +0000HIGH 7.5: Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. Th