{"schema_version":1,"title":"Opentext vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 17 vulnerabilities in Opentext: 2 in the last 7 days and 11 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-10698, was published on 12 November 2026. 7 vulnerabilities in the last four weeks, up 250% on the four before (2). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/opentext","json_url":"https://junglewise.ai/threats/vendors/opentext.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/opentext","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":2,"all_time":17,"critical":1,"exploited":0,"last_7_days":2,"last_30_days":8,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2025-10698","slug":"cve-2025-10698-incorrect-default-permissions-and-product-released-in-non-release","title":"OpenText Identity Console incorrect default permissions","severity":"info","exploited":false,"published_at":"2026-11-12T17:17:20.8+00:00","url":"https://junglewise.ai/threats/cve-2025-10698-incorrect-default-permissions-and-product-released-in-non-release"},{"cve":"CVE-2025-10248","slug":"cve-2025-10248-xss-vulnerability-in-opentext-filr-appliance-versions-upto-25-1-2","title":"OpenText Filr Appliance stored XSS via file upload","severity":"info","exploited":false,"published_at":"2026-11-09T16:17:23.973+00:00","url":"https://junglewise.ai/threats/cve-2025-10248-xss-vulnerability-in-opentext-filr-appliance-versions-upto-25-1-2"},{"cve":"CVE-2026-76580","slug":"cve-2026-76580-improper-neutralization-of-input-during-web-page-generation-cross","title":"OpenText Directory Services cross-site scripting","severity":"info","exploited":false,"published_at":"2026-11-05T20:17:59.86+00:00","url":"https://junglewise.ai/threats/cve-2026-76580-improper-neutralization-of-input-during-web-page-generation-cross"},{"cve":"CVE-2026-1339","slug":"cve-2026-1339-an-open-redirect-vulnerability-has-been-identified-in-opentext","title":"OpenText Universal Discovery and CMDB open redirect","severity":"info","exploited":false,"published_at":"2026-11-05T20:17:55.6+00:00","url":"https://junglewise.ai/threats/cve-2026-1339-an-open-redirect-vulnerability-has-been-identified-in-opentext"},{"cve":"CVE-2026-19134","slug":"cve-2026-19134-a-vulnerability-in-opentext-opentext-directory-services-otds","title":"OpenText Directory Services black box reverse engineering","severity":"info","exploited":false,"published_at":"2026-11-05T20:17:54.3+00:00","url":"https://junglewise.ai/threats/cve-2026-19134-a-vulnerability-in-opentext-opentext-directory-services-otds"},{"cve":"CVE-2026-18159","slug":"cve-2026-18159-a-vulnerability-in-opentext-opentext-directory-services-otds-on","title":"OpenText Directory Services clickjacking vulnerability","severity":"info","exploited":false,"published_at":"2026-11-05T20:17:51.87+00:00","url":"https://junglewise.ai/threats/cve-2026-18159-a-vulnerability-in-opentext-opentext-directory-services-otds-on"},{"cve":"CVE-2026-112256","slug":"cve-2026-112256-acceptance-of-extraneous-untrusted-data-with-trusted-data","title":"OpenText Advanced Authentication Server ACL bypass via extraneous data","severity":"info","exploited":false,"published_at":"2026-10-29T16:17:58.39+00:00","url":"https://junglewise.ai/threats/cve-2026-112256-acceptance-of-extraneous-untrusted-data-with-trusted-data"},{"cve":"CVE-2026-112255","slug":"cve-2026-112255-initialization-of-a-resource-with-an-insecure-default","title":"OpenText Advanced Authentication Server insecure default endpoint creation","severity":"info","exploited":false,"published_at":"2026-10-29T16:17:58.19+00:00","url":"https://junglewise.ai/threats/cve-2026-112255-initialization-of-a-resource-with-an-insecure-default"},{"cve":"CVE-2026-75120","epss":0.0041,"slug":"cve-2026-75120-the-opentext-encase-safe-agents-component-utilized-by-opentext","title":"OpenText EnCase SAFE Agents authentication bypass","severity":"info","exploited":false,"published_at":"2026-10-13T19:19:53.39+00:00","url":"https://junglewise.ai/threats/cve-2026-75120-the-opentext-encase-safe-agents-component-utilized-by-opentext"},{"cve":"CVE-2025-15591","slug":"cve-2025-15591-cross-site-scripting-xss-in-the-forums-feature-of-opentext","title":"OpenText Content Server cross-site scripting in Forums","severity":"info","exploited":false,"published_at":"2026-10-06T14:17:34.087+00:00","url":"https://junglewise.ai/threats/cve-2025-15591-cross-site-scripting-xss-in-the-forums-feature-of-opentext"},{"cve":"CVE-2026-12559","epss":0.0039,"slug":"cve-2026-12559-a-stored-cross-site-scripting-xss-vulnerability-has-been","title":"OpenText Vendor Invoice Management stored cross-site scripting","severity":"info","exploited":false,"published_at":"2026-09-24T15:17:18.35+00:00","url":"https://junglewise.ai/threats/cve-2026-12559-a-stored-cross-site-scripting-xss-vulnerability-has-been"},{"cve":"CVE-2025-8050","cvss":6.5,"epss":0.0029,"slug":"cve-2025-8050-external-control-of-file-name-or-path-vulnerability-in-opentext","title":"External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could…","severity":"medium","exploited":false,"published_at":"2025-10-21T18:15:36.927+00:00","url":"https://junglewise.ai/threats/cve-2025-8050-external-control-of-file-name-or-path-vulnerability-in-opentext"},{"cve":"CVE-2025-8053","cvss":9.1,"epss":0.0026,"slug":"cve-2025-8053-insufficient-granularity-of-access-control-vulnerability-in","title":"Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured…","severity":"critical","exploited":false,"published_at":"2025-10-20T20:15:38.71+00:00","url":"https://junglewise.ai/threats/cve-2025-8053-insufficient-granularity-of-access-control-vulnerability-in"},{"cve":"CVE-2025-8052","cvss":8.8,"epss":0.0036,"slug":"cve-2025-8052-sql-injection-vulnerability-in-opentext-flipper-allows-sql","title":"SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege…","severity":"high","exploited":false,"published_at":"2025-10-20T20:15:38.533+00:00","url":"https://junglewise.ai/threats/cve-2025-8052-sql-injection-vulnerability-in-opentext-flipper-allows-sql"},{"cve":"CVE-2025-8051","cvss":6.5,"epss":0.0039,"slug":"cve-2025-8051-path-traversal-vulnerability-in-opentext-flipper-allows-absolute","title":"Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user…","severity":"medium","exploited":false,"published_at":"2025-10-20T20:15:38.36+00:00","url":"https://junglewise.ai/threats/cve-2025-8051-path-traversal-vulnerability-in-opentext-flipper-allows-absolute"},{"cve":"CVE-2025-8049","cvss":8.8,"epss":0.0028,"slug":"cve-2025-8049-insufficient-granularity-of-access-control-vulnerability-in","title":"Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured…","severity":"high","exploited":false,"published_at":"2025-10-20T20:15:38.173+00:00","url":"https://junglewise.ai/threats/cve-2025-8049-insufficient-granularity-of-access-control-vulnerability-in"},{"cve":"CVE-2025-8048","cvss":6.5,"epss":0.0029,"slug":"cve-2025-8048-external-control-of-file-name-or-path-vulnerability-in-opentext","title":"External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could…","severity":"medium","exploited":false,"published_at":"2025-10-20T20:15:38.007+00:00","url":"https://junglewise.ai/threats/cve-2025-8048-external-control-of-file-name-or-path-vulnerability-in-opentext"}],"vendor":{"hub":true,"name":"Opentext","slug":"opentext","homepage":"https://www.opentext.com/","description":"OpenText is a software company that develops and sells enterprise information management software.","url":"https://junglewise.ai/threats/vendors/opentext"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":2}],"most_severe":[{"cve":"CVE-2025-8053","cvss":9.1,"epss":0.0026,"slug":"cve-2025-8053-insufficient-granularity-of-access-control-vulnerability-in","title":"Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured…","severity":"critical","exploited":false,"published_at":"2025-10-20T20:15:38.71+00:00","url":"https://junglewise.ai/threats/cve-2025-8053-insufficient-granularity-of-access-control-vulnerability-in"},{"cve":"CVE-2025-8052","cvss":8.8,"epss":0.0036,"slug":"cve-2025-8052-sql-injection-vulnerability-in-opentext-flipper-allows-sql","title":"SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege…","severity":"high","exploited":false,"published_at":"2025-10-20T20:15:38.533+00:00","url":"https://junglewise.ai/threats/cve-2025-8052-sql-injection-vulnerability-in-opentext-flipper-allows-sql"},{"cve":"CVE-2025-8049","cvss":8.8,"epss":0.0028,"slug":"cve-2025-8049-insufficient-granularity-of-access-control-vulnerability-in","title":"Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured…","severity":"high","exploited":false,"published_at":"2025-10-20T20:15:38.173+00:00","url":"https://junglewise.ai/threats/cve-2025-8049-insufficient-granularity-of-access-control-vulnerability-in"},{"cve":"CVE-2025-8051","cvss":6.5,"epss":0.0039,"slug":"cve-2025-8051-path-traversal-vulnerability-in-opentext-flipper-allows-absolute","title":"Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user…","severity":"medium","exploited":false,"published_at":"2025-10-20T20:15:38.36+00:00","url":"https://junglewise.ai/threats/cve-2025-8051-path-traversal-vulnerability-in-opentext-flipper-allows-absolute"},{"cve":"CVE-2025-8050","cvss":6.5,"epss":0.0029,"slug":"cve-2025-8050-external-control-of-file-name-or-path-vulnerability-in-opentext","title":"External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could…","severity":"medium","exploited":false,"published_at":"2025-10-21T18:15:36.927+00:00","url":"https://junglewise.ai/threats/cve-2025-8050-external-control-of-file-name-or-path-vulnerability-in-opentext"},{"cve":"CVE-2025-8048","cvss":6.5,"epss":0.0029,"slug":"cve-2025-8048-external-control-of-file-name-or-path-vulnerability-in-opentext","title":"External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could…","severity":"medium","exploited":false,"published_at":"2025-10-20T20:15:38.007+00:00","url":"https://junglewise.ai/threats/cve-2025-8048-external-control-of-file-name-or-path-vulnerability-in-opentext"},{"cve":"CVE-2026-75120","epss":0.0041,"slug":"cve-2026-75120-the-opentext-encase-safe-agents-component-utilized-by-opentext","title":"OpenText EnCase SAFE Agents authentication bypass","severity":"info","exploited":false,"published_at":"2026-10-13T19:19:53.39+00:00","url":"https://junglewise.ai/threats/cve-2026-75120-the-opentext-encase-safe-agents-component-utilized-by-opentext"},{"cve":"CVE-2026-12559","epss":0.0039,"slug":"cve-2026-12559-a-stored-cross-site-scripting-xss-vulnerability-has-been","title":"OpenText Vendor Invoice Management stored cross-site scripting","severity":"info","exploited":false,"published_at":"2026-09-24T15:17:18.35+00:00","url":"https://junglewise.ai/threats/cve-2026-12559-a-stored-cross-site-scripting-xss-vulnerability-has-been"},{"cve":"CVE-2025-10698","slug":"cve-2025-10698-incorrect-default-permissions-and-product-released-in-non-release","title":"OpenText Identity Console incorrect default permissions","severity":"info","exploited":false,"published_at":"2026-11-12T17:17:20.8+00:00","url":"https://junglewise.ai/threats/cve-2025-10698-incorrect-default-permissions-and-product-released-in-non-release"},{"cve":"CVE-2025-10248","slug":"cve-2025-10248-xss-vulnerability-in-opentext-filr-appliance-versions-upto-25-1-2","title":"OpenText Filr Appliance stored XSS via file upload","severity":"info","exploited":false,"published_at":"2026-11-09T16:17:23.973+00:00","url":"https://junglewise.ai/threats/cve-2025-10248-xss-vulnerability-in-opentext-filr-appliance-versions-upto-25-1-2"}],"generated_at":"2026-11-13T03:07:00.155039+00:00","technologies":[{"name":"Opentext Flipper","slug":"flipper","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/flipper"}]}