Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:privileged_access_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductPrivileged Access Manager (f8cc6683-c49d-5cf3-bbd6-5d892b6bf617)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12111 vulnerable 2026-06-03 14:54:15.655994 Potential LDAP injection vulnerability in OpenText Privileged Access Manager
HIGH (8)
In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5)
Published: 2024-12-19T20:10:58.346Z
Updated: 2025-10-09T18:46:06.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11847 vulnerable 2026-06-03 14:41:32.172171 Vulnerability in sshrelay in privileged access manager provides full system access.
HIGH (8.2)
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.
Published: 2024-08-21T13:38:44.228Z
Updated: 2024-08-22T13:50:29.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11846 vulnerable 2026-06-03 14:41:32.169591 Improper handling of token allows access to restricted resource in Privileged Access Manager
HIGH (8.7)
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1.
Published: 2024-08-21T13:37:11.454Z
Updated: 2024-08-21T14:40:15.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.