PT-2025-37183 · Opentext · Opentext Content Management

Armin Stock · Published 2025-09-11 · Updated 2025-09-11 · CVE-2025-8716

Mitre

CVSS v4.0

5.8

Medium

Base vector

AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2025-8716

Affected Products

Opentext Content Management

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-8716 · Security Note
• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0847046 · Note