CVE-2026-13202
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
OpenText Directory Services through version 22.2 contains an input data manipulation vulnerability.
Risk Assessment
An attacker can manipulate input data, potentially leading to unauthorized changes in the directory or data integrity compromise.
Recommendation
Update OpenText Directory Services to the latest version if available, and restrict access to the service.
Other vulnerabilities in OpenText Directory Services
See all- CVE-2025-15579Critical
Deserialization of Untrusted Data vulnerability in OpenText Directory Services allows Object Injection. It could lead to remote code execution, denial of service, or privilege escalation. Affects versions before 24.4.16, 25.1 before 25.1.9, 25.2 before 25.2.9, 25.3 before 25.3.8, 25.4 before 25.4.5, and 26.1 before 26.1.2.
- CVE-2023-7249Critical
A path traversal vulnerability in OpenText Directory Services allows an attacker to access files outside the intended directory. It affects versions from 16.4.2 before 24.1.
Original NVD description (English source)
A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS