Appbuilder
Approved changes feed: RSS · Atom
cpe:2.3:a:opentext:appbuilder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opentext (5717091c-f148-5db6-be32-940ef0cdacf9) |
|---|---|
| Product | Appbuilder (7951b43d-006b-5e34-819d-2d3e8356dfcf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4554 |
vulnerable | 2026-06-08 06:16:12.979208 |
XML External Entity (XXE) Processing
MEDIUM (4.9)
Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.
AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:49.834Z
Updated: 2025-05-29T15:08:27.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4554 |
not_vulnerable | 2026-06-08 06:16:12.979066 |
XML External Entity (XXE) Processing
MEDIUM (4.9)
Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.
AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:49.834Z
Updated: 2025-05-29T15:08:27.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4553 |
not_vulnerable | 2026-06-08 06:16:12.978457 |
Unauthenticated Access to AppBuilder Configuration Files
MEDIUM (5.3)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
AppBuilder configuration files are viewable by unauthenticated users.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:45.438Z
Updated: 2024-08-28T20:19:02.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4553 |
vulnerable | 2026-06-08 06:16:12.978409 |
Unauthenticated Access to AppBuilder Configuration Files
MEDIUM (5.3)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
AppBuilder configuration files are viewable by unauthenticated users.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:45.438Z
Updated: 2024-08-28T20:19:02.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4552 |
vulnerable | 2026-06-08 06:16:12.977752 |
Java Database Connectivity (JDBC) URL Manipulation
MEDIUM (5.5)
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.
This issue affects AppBuilder: from 21.2 before 23.2.
Published: 2024-01-29T20:56:35.378Z
Updated: 2025-06-17T21:29:16.913Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4552 |
not_vulnerable | 2026-06-08 06:16:12.977561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4551 |
vulnerable | 2026-06-08 06:16:12.974801 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4551 |
not_vulnerable | 2026-06-08 06:16:12.974660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4550 |
vulnerable | 2026-06-08 06:16:12.972310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4550 |
not_vulnerable | 2026-06-08 06:16:12.972261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.