Approved changes feed: RSS · Atom

cpe:2.3:a:opentext™:directory_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpentext™ (fd16c886-a218-56bd-8454-2a25c124d556)
ProductDirectory Services (305b8c4f-2b9f-5825-ba94-7d725addb0ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1658 vulnerable 2026-06-03 15:14:44.888750 Content spoofing vulnerability discovered in OpenText™ Directory Services
User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.  The vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially misleading users. This issue affects Directory Services: from 20.4.1 through 25.2.
Published: 2026-02-19T22:40:33.406Z
Updated: 2026-03-02T15:56:48.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15579 vulnerable 2026-06-03 14:58:57.382862 An Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.
Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection.  The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.16, from 25.1 before 25.1.9, from 25.2 before 25.2.9, from 25.3 before 25.3.8, from 25.4 before 25.4.5, from 26.1 before 26.1.2.
Published: 2026-02-18T14:57:04.010Z
Updated: 2026-02-27T21:46:44.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7650 vulnerable 2026-06-03 14:58:06.617335 Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4
Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.
Published: 2025-07-10T10:02:58.567Z
Updated: 2025-07-10T14:14:17.034Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.