PT-2025-29078 · Opentext · Opentext Directory Services

Published 2025-07-10 · Updated 2025-07-10 · CVE-2024-7650

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:A/V:D/RE:L/U:Clear

Name of the Vulnerable Software and Affected Versions: OpenText™ Directory Services version 23.4

Description: An improper control of generation of code ('Code Injection') vulnerability exists in OpenText™ Directory Services, potentially allowing remote code inclusion through script injection.

Recommendations: Update OpenText™ Directory Services to a fixed version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2025-16401

CVE-2024-7650

Affected Products

Opentext Directory Services

References · 5

• https://bdu.fstec.ru/vul/2025-16401 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-7650 · Security Note
• https://twitter.com/CVEnew/status/1943297234025775603 · Twitter Post
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0844620 · Note
• https://t.me/cvenotify/128316 · Telegram Post