Appbuilder
Approved changes feed: RSS · Atom
cpe:2.3:a:opentext:appbuilder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opentext (5717091c-f148-5db6-be32-940ef0cdacf9) |
|---|---|
| Product | Appbuilder (7951b43d-006b-5e34-819d-2d3e8356dfcf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4554 |
vulnerable | 2026-06-03 14:53:28.488076 |
XML External Entity (XXE) Processing
MEDIUM (4.9)
Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.
AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:49.834Z
Updated: 2025-05-29T15:08:27.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4554 |
not_vulnerable | 2026-06-03 14:53:28.488040 |
XML External Entity (XXE) Processing
MEDIUM (4.9)
Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.
AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:49.834Z
Updated: 2025-05-29T15:08:27.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4553 |
not_vulnerable | 2026-06-03 14:53:28.487611 |
Unauthenticated Access to AppBuilder Configuration Files
MEDIUM (5.3)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
AppBuilder configuration files are viewable by unauthenticated users.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:45.438Z
Updated: 2024-08-28T20:19:02.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4553 |
vulnerable | 2026-06-03 14:53:28.487579 |
Unauthenticated Access to AppBuilder Configuration Files
MEDIUM (5.3)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
AppBuilder configuration files are viewable by unauthenticated users.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:45.438Z
Updated: 2024-08-28T20:19:02.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4552 |
vulnerable | 2026-06-03 14:53:28.487119 |
Java Database Connectivity (JDBC) URL Manipulation
MEDIUM (5.5)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:35.378Z
Updated: 2025-06-17T21:29:16.913Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4552 |
not_vulnerable | 2026-06-03 14:53:28.487087 |
Java Database Connectivity (JDBC) URL Manipulation
MEDIUM (5.5)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:35.378Z
Updated: 2025-06-17T21:29:16.913Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4551 |
vulnerable | 2026-06-03 14:53:28.486601 |
Command Injection via Task Scheduler
HIGH (7.2)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection.
The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:30.404Z
Updated: 2024-08-02T07:31:06.062Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4551 |
not_vulnerable | 2026-06-03 14:53:28.486574 |
Command Injection via Task Scheduler
HIGH (7.2)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection.
The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:30.404Z
Updated: 2024-08-02T07:31:06.062Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4550 |
vulnerable | 2026-06-03 14:53:28.484710 |
Unauthenticated Arbitrary File Read
HIGH (7.5)
Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:09.908Z
Updated: 2024-11-12T21:30:04.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4550 |
not_vulnerable | 2026-06-03 14:53:28.484662 |
Unauthenticated Arbitrary File Read
HIGH (7.5)
Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:09.908Z
Updated: 2024-11-12T21:30:04.904Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.