Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:opentext_application_automation_tools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductOpentext Application Automation Tools (5cce9770-dbf8-592c-9b51-4cbd39f5ea5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4692 vulnerable 2026-06-03 14:57:16.013281 Multiple missing permission checks
Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names. This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Published: 2024-10-16T16:41:23.529Z
Updated: 2024-10-16T18:13:23.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4690 vulnerable 2026-06-03 14:57:16.012841 Insecure usage for DocumentBuilderFactory and TransformerFactory in OpenText Application Automation Tools
Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Published: 2024-10-16T16:41:22.265Z
Updated: 2024-10-16T18:53:09.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4211 vulnerable 2026-06-03 14:57:14.932999 Multiple missing permission checks
Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels. Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate ALM server names, usernames and client IDs configured to be used with ALM servers. This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Published: 2024-10-16T16:41:20.927Z
Updated: 2024-10-16T18:54:06.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4189 vulnerable 2026-06-03 14:57:14.892889 Multiple XXE sinks in Run LoadRunner script step in OpenText Application Automation Tools
Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Published: 2024-10-16T16:41:19.784Z
Updated: 2024-10-16T18:54:37.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4184 vulnerable 2026-06-03 14:57:14.880195 Multiple XXE sinks in ALM archive post-build step in OpenText Application Automation Tools
Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below.
Published: 2024-10-16T16:41:02.472Z
Updated: 2024-10-16T18:55:04.438Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.