Opentext Content Management vulnerabilities

3 CVEs affecting Opentext Content Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8716, published 2025-09-11.

More from Opentext.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-12863, published 2025-04-21. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.
• CVE-2024-12543, published 2025-04-21. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter…
• CVE-2025-8716, published 2025-09-11. Medium severity, CVSS 5.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known.