PT-2025-29078 · Opentext · Opentext Directory Services

CVE-2024-7650 · Publicado 2025-07-10 · Atualizado 2025-07-10

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Média

Vetor base

AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:A/V:D/RE:L/U:Clear

Name of the Vulnerable Software and Affected Versions: OpenText™ Directory Services version 23.4

Description: An improper control of generation of code ('Code Injection') vulnerability exists in OpenText™ Directory Services, potentially allowing remote code inclusion through script injection.

Recommendations: Update OpenText™ Directory Services to a fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2025-16401

CVE-2024-7650

Produtos afetados

Opentext Directory Services

Referências · 5

• https://bdu.fstec.ru/vul/2025-16401 · Nota de Segurança
• https://twitter.com/CVEnew/status/1943297234025775603 · Publicação no Twitter
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0844620 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-7650 · Nota de Segurança
• https://t.me/cvenotify/128316 · Publicação no Telegram