PT-2024-9971 · Opentext · Opentext Operations Bridge Manager

Published 2024-12-18 · Updated 2024-12-19 · CVE-2021-22501

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:A/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 2017.05 through 2020.10

Description: The issue is related to an Improper Restriction of XML External Entity Reference, which could allow for Input Data Manipulation. This could be exploited to gain unauthorized access to confidential information. The vulnerability can be exploited by a remote attacker.

Recommendations: For versions 2017.05 through 2020.10, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2025-00085

CVE-2021-22501

Affected Products

Opentext Operations Bridge Manager

References · 5

• https://bdu.fstec.ru/vul/2025-00085 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22501 · Security Note
• https://twitter.com/CVEnew/status/1869792923744907412 · Twitter Post
• https://portal.microfocus.com/s/article/KM000037407?language=en_US · Note
• https://t.me/cvedetector/13349 · Telegram Post