CVE-2023-7249
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
A path traversal vulnerability in OpenText Directory Services allows an attacker to access files outside the intended directory. It affects versions from 16.4.2 before 24.1.
Risk Assessment
The risk includes unauthorized access to sensitive files on the system, which could lead to data disclosure or further attacks.
Recommendation
It is recommended to upgrade OpenText Directory Services to version 24.1 or later, which includes the fix. Also, restrict access to the service and monitor activity for attempts to exploit the vulnerability.
Other vulnerabilities in OpenText Directory Services
See all- CVE-2025-15579Critical
Deserialization of Untrusted Data vulnerability in OpenText Directory Services allows Object Injection. It could lead to remote code execution, denial of service, or privilege escalation. Affects versions before 24.4.16, 25.1 before 25.1.9, 25.2 before 25.2.9, 25.3 before 25.3.8, 25.4 before 25.4.5, and 26.1 before 26.1.2.
- CVE-2026-13202High
OpenText Directory Services through version 22.2 contains an input data manipulation vulnerability.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1.