CVE-2024-12111: Opentext Privileged Access Manager

High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days.

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)

Affected products

• Opentext Privileged Access Manager

Published 2024-12-19. Last modified 2026-06-17.