Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:web_site_management_server:16.7.1:*:*:*:*:*:*:*

part: a version: 16.7.1 update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductWeb Site Management Server (4466cbca-76fe-53d9-9591-7b0c85446c38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13672 vulnerable 2026-06-03 14:58:46.679737 Reflected Cross-Site Scripting discovered in OpenText WSM Management Server.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allows Reflected XSS. The vulnerability could allow injecting malicious JavaScript inside URL parameters that was then rendered with the preview of the page, so that malicious scripts could be executed on the client side. This issue affects Web Site Management Server: 16.7.0, 16.7.1.
Published: 2026-02-19T22:36:33.467Z
Updated: 2026-02-24T14:42:46.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13671 vulnerable 2026-06-03 14:58:46.678884 Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.
Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.
Published: 2026-02-19T22:36:49.083Z
Updated: 2026-02-24T14:39:58.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.