PT-2026-20435 · Opentext · Opentext Directory Services

Publicado 2026-02-18 · Atualizado 2026-02-27 · CVE-2025-15579

Positive Technologies (AI Summary)

CVSS v4.0

9.5

Crítica

Vetor base

AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/V:C/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions OpenText Directory Services versions 10.5 through 26.1

Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. Successful exploitation of this issue could result in remote code execution, denial of service, or privilege escalation.

Recommendations Update OpenText Directory Services to a version later than 26.1.

Correção

LPE

RCE

DoS

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2025-15579

Produtos afetados

Opentext Directory Services

Referências · 7

• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0859600&sys_kb_id=f82c01214707b6144549b6bd416d43b7&spa=1 · Nota
• https://twitter.com/VulmonFeeds/status/2024220486842884161 · Publicação no Twitter
• https://t.me/CVEtracker/44973 · Publicação no Telegram
• https://t.me/cveNotify/153588 · Publicação no Telegram
• https://twitter.com/0dayPublishing/status/2024145526699032846 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-15579 · Nota de Segurança
• https://twitter.com/CVEnew/status/2024154250624778313 · Publicação no Twitter