CVE-2025-0885: Opentext Groupwise

Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow unauthorized access to calendar items marked private. This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.

Affected products

• Opentext Groupwise: from 7, up to and including 17.5; version 23.4 only; version 24.1 only; version 24.2 only; version 24.3 only; version 24.4 only

Published 2025-07-03. Last modified 2026-06-17.