Opentext Filr vulnerabilities

2 CVEs affecting Opentext Filr, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3266, published 2026-03-03.

More from Opentext.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-3266, published 2026-03-03. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted…
• CVE-2024-4187, published 2024-07-31. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.