目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

OpenText 厂商漏洞列表 / CVE 中文分析 144

OpenText 厂商相关 144 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

OpenText 主要提供企业级内容管理与信息治理解决方案。其软件历史上频繁出现远程代码执行、跨站脚本及越权访问等高危漏洞，累计收录 CVE 达 144 条。这些缺陷多源于复杂架构中的输入验证缺失或权限配置错误。近期安全事件凸显了其在处理敏感数据时的潜在风险，建议用户及时修补已知漏洞并强化访问控制策略，以保障企业数据资产安全。

上位製品 OpenText: Brava! Desktop iManager NetIQ Advance Authentication eDirectory Flipper AppBuilder OpenText Application Automation Tools ArcSight Enterprise Security Manager Privileged Access Manager ArcSight Intelligence OpenText Content Management NetIQ Access Manager Secure Content Manager OpenText Directory Services Self Service Password Reset Performance Center Dimensions RM ArcSight Management Center PVCS Version Manager Advance Authentication Advanced Authentication OpenText Enterprise Security Manager Identity Manager AzureAD Driver NetIQ Directory and Resource Administrator Identity Manager Advanced Edition Content Server Identity Manager IDM Driver and Extensions Identity Manager REST Driver 1.1.2.0200 Operations Agent
CVE IDタイトルCVSS深刻度公開日
CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access. — Privileged Access ManagerCWE-78 8.2 High2024-08-21
CVE-2020-11846 Improper handling of token allows access to restricted resource in Privileged Access Manager — Privileged Access ManagerCWE-269 8.7 High2024-08-21
CVE-2020-11850 Cross site scripting vulnerability in Self Service Password Reset — Self Service Password ResetCWE-20 7.3 High2024-08-21
CVE-2023-7249 OpenText Directory Services 安全漏洞 — OpenText Directory ServicesCWE-22 6.5AIMediumAI2024-08-12
CVE-2024-6357 Insecure Direct Object Reference vulnerability — ArcSight IntelligenceCWE-639 6.3 Medium2024-08-06
CVE-2024-6359 Privilege escalation vulnerability — ArcSight IntelligenceCWE-269 6.4 Medium2024-08-06
CVE-2024-6358 Incorrect Authorization vulnerability — ArcSight IntelligenceCWE-863 6.3 Medium2024-08-06
CVE-2024-7050 OpenText Directory Services 安全漏洞 — OpenText Directory ServicesCWE-287 9.1 -2024-07-26
CVE-2020-25836 Potential information leakage resulting in unauthorized access — NetIQ Directory and Resource AdministratorCWE-200 6.3 Medium2024-07-16
CVE-2024-4190 OpenText ArcSight Logger Stored XSS — ArcSight LoggerCWE-79 8.1 High2024-06-11
CVE-2020-11843 Potential information leakage in administrator enabled debug mode — NetIQ Access ManagerCWE-200 6.5 Medium2024-06-11
CVE-2024-4429 Cross Site Request Forgery vulnerability in iManager — iManagerCWE-352 5.4 Medium2024-05-28
CVE-2024-3969 XML External Entity injection vulnerability in iManager — iManagerCWE-611 7.8 High2024-05-28
CVE-2024-5201 Dimensions RM - Privilege Escalation — Dimensions RMCWE-287 8.8 High2024-05-23
CVE-2024-5202 Dimensions RM - Arbitrary File Read — Dimensions RMCWE-200 7.7 High2024-05-23
CVE-2024-2835 OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS — ArcSight Enterprise Security ManagerCWE-79 8.7 High2024-05-20
CVE-2024-3482 OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS — ArcSight Enterprise Security ManagerCWE-79 8.7 High2024-05-20
CVE-2021-22508 Potential SQL injection in OpenText Operations Bridge Reporter — Operations Bridge ReporterCWE-20 7.2 High2024-05-17
CVE-2024-3488 File Upload vulnerability in unauthenticated session found in iManager. — iManagerCWE-20 5.6 Medium2024-05-15
CVE-2024-3487 Broken Authentication vulnerability in iManager — iManagerCWE-287 3.5 Low2024-05-15
CVE-2024-3486 XML External Entity injection vulnerability in iManager — iManagerCWE-611 7.8 High2024-05-15
CVE-2024-3485 Server-Side Request Forgery vulnerability in iManager — iManagerCWE-918 5.3 Medium2024-05-15
CVE-2024-3484 Path Traversal vulnerability found in iManager — iManagerCWE-22 5.7 Medium2024-05-15
CVE-2024-3483 Remote Code Execution vulnerability in the iManager — iManagerCWE-502 7.8 High2024-05-15
CVE-2024-3967 Remote Code Execution vulnerability in the iManager — iManagerCWE-502 7.6 High2024-05-15
CVE-2024-3968 Remote Code Execution vulnerability in the iManager — iManagerCWE-20 7.8 High2024-05-15
CVE-2024-3970 Server-Side Request Forgery vulnerability in iManager — iManagerCWE-918 5.3 Medium2024-05-15
CVE-2023-7240 Broken Access Control leading to SSRF in NetIQ Identity Console — NetIQ Identity ConsoleCWE-20 5.8 Medium2024-05-07
CVE-2024-2834 OpenText ArcSight Management Center and ArcSight Platform Stored XSS — ArcSight Management CenterCWE-79 8.7 High2024-04-08
CVE-2024-1973 Elevation of privileges vulnerability — Secure Content ManagerCWE-269 8.5 High2024-03-25

本页汇总了 OpenText 厂商截至目前公开的全部 144 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。