Opentext Web Site Management Server vulnerabilities

3 CVEs affecting Opentext Web Site Management Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9208, published 2026-02-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9208, published 2026-02-19. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Stored XSS. The vulnerability could execute…
CVE-2025-13672, published 2026-02-19. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerability could…
CVE-2025-13671, published 2026-02-19. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product,…