OpenText Directory Services vulnerabilities

Deserialization of Untrusted Data vulnerability in OpenText Directory Services allows Object Injection. It could lead to remote code execution, denial of service, or privilege escalation. Affects versions before 24.4.16, 25.1 before 25.1.9, 25.2 before 25.2.9, 25.3 before 25.3.8, 25.4 before 25.4.5, and 26.1 before 26.1.2.

A path traversal vulnerability in OpenText Directory Services allows an attacker to access files outside the intended directory. It affects versions from 16.4.2 before 24.1.

OpenText Directory Services through version 22.2 contains an input data manipulation vulnerability.