CVE-2022-35898: Opentext Bizmanager

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account.

Affected products

• Opentext Bizmanager: before 16.6.0.1 (fixed in 16.6.0.1)

Published 2023-05-01. Last modified 2026-06-17.