What is the OpenText CNA?

OpenText is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 151 CVE records since 2023.

How many CVEs has OpenText published?

OpenText has published 151 CVE records, including 131 in the last two years.

What is OpenText's CVE data quality grade?

RadicalNotion.AI grades OpenText's CVE data quality as A, with an overall completeness score of 97.7%. This reflects how consistently its CVE records include vendor (98.7%), product (100%), CVSS (96.7%), and CWE (95.4%) information.

What products does OpenText publish CVEs for?

OpenText most frequently publishes CVEs for iManager, windows, netiq_advanced_authentication, eDirectory, linux kernel.

Which vendors does OpenText cover?

OpenText publishes CVEs across 10 distinct vendors, most often OpenText, Micro Focus, microsoft, NetIQ, Jenkins.

Is OpenText actively publishing CVEs?

OpenText is currently active, based on 131 CVEs in the last two years.

What is the average severity of OpenText's CVEs?

The average CVSS base score across OpenText's scored CVEs is 6.3.

How many critical CVEs has OpenText published?

OpenText has published 33 critical-severity CVEs and 67 high-severity CVEs.

What are the most common weakness types in OpenText's CVEs?

OpenText's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-287 (Improper Authentication).

How does OpenText rank among CNAs?

By total CVE volume, OpenText ranks #102 of 370 CNAs, and it reports more complete CVE records than 47% of all CNAs.

Grade A

Active

OpenText

Name: OpenText CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published January 30, 2026

151

CVEs published

Total assigned

2.6

Years active

2023–2026

6.3

Avg CVSS

Across scored CVEs

131

Recent CVEs

Last 2 years

Overview

OpenText is a CVE Numbering Authority that has published 151 CVE records since 2023. It is currently classified as active, with 131 CVEs published in the last two years. Its CVE data quality is graded A (97.7% overall completeness).

Among the 370 CNAs tracked here, OpenText ranks #102 by CVE volume and reports more complete records than 47% of all CNAs.

Data quality report card

How complete and consistent OpenText's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often OpenText also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

97.7%

Overall score

Overall completeness97.7%

Vendor completeness98.7%

Product completeness100%

CVSS completeness96.7%

CWE completeness95.4%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

236 chars

Avg description length

Per CVE record

2023-06-13

First CVE date

Earliest assignment

2026-01-30

Latest CVE date

Most recent assignment

6.3

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of OpenText's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical33

High67

Medium56

Low14

In CISA’s Known Exploited Vulnerabilities catalog

None of OpenText's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories OpenText most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs OpenText has published each year.

2023

2024

104

2025

2026

Top vendors

The vendors OpenText publishes the most CVEs for.

OpenText155 CVEs
Micro Focus66 CVEs
microsoft7 CVEs
NetIQ6 CVEs
Jenkins6 CVEs
linux6 CVEs
Webroot4 CVEs
EMC1 CVEs

Latest CVEs

The most recent CVEs assigned by OpenText.

CVE-2026-11877CWE-648
Missing Authorization Vulnerability in OpenText Access Manager
Medium · CVSS 6.3
EPSS 0.2%2026-06-24
CVE-2026-11878CWE-79
Reflected Cross-Site Scripting vulnerability in OpenText Access Manager
High · CVSS 8.2
EPSS 0.1%2026-06-24
CVE-2025-15610CWE-502
Critical · CVSS 9.3
EPSS 0.3%2026-04-15
CVE-2026-2123CWE-280
Privilege escalation vulnerability in Operations Agent
High · CVSS 8.6
EPSS 0.1%2026-03-31
CVE-2024-11604CWE-532
Insertion of Sensitive Information into Log File
High · CVSS 7.3
EPSS 0.1%2026-03-27
CVE-2025-13478CWE-522
Cache Misconfiguration Leading to Cross-User Data Exposure
High · CVSS 8.4
EPSS 0.3%2026-03-27
CVE-2026-3278CWE-79
XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
High · CVSS 7.4
EPSS 0.1%2026-03-18
CVE-2025-12453CWE-79
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Medium · CVSS 5.1
EPSS 0.2%2026-03-13
CVE-2025-12454CWE-79
Improper neutralization of input during web page generation vulnerability has been discovered in OpenText™ Vertica.
Medium · CVSS 5.1
EPSS 0.2%2026-03-13
CVE-2025-12455CWE-204
Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.
Medium · CVSS 5.1
EPSS 0.3%2026-03-13
CVE-2026-3266CWE-862
Improper access control vulnerability has been discovered in OpenText™ Filr.
High · CVSS 8.3
EPSS 0.3%2026-03-03
CVE-2025-9120CWE-94
RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup.
High · CVSS 8.6
EPSS 0.2%2026-02-24

Track new OpenText CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor OpenText CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the OpenText CNA.

What is the OpenText CNA?: OpenText is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 151 CVE records since 2023.
How many CVEs has OpenText published?: OpenText has published 151 CVE records, including 131 in the last two years.
What is OpenText's CVE data quality grade?: RadicalNotion.AI grades OpenText's CVE data quality as A, with an overall completeness score of 97.7%. This reflects how consistently its CVE records include vendor (98.7%), product (100%), CVSS (96.7%), and CWE (95.4%) information.
What products does OpenText publish CVEs for?: OpenText most frequently publishes CVEs for iManager, windows, netiq_advanced_authentication, eDirectory, linux kernel.
Which vendors does OpenText cover?: OpenText publishes CVEs across 10 distinct vendors, most often OpenText, Micro Focus, microsoft, NetIQ, Jenkins.
Is OpenText actively publishing CVEs?: OpenText is currently active, based on 131 CVEs in the last two years.
What is the average severity of OpenText's CVEs?: The average CVSS base score across OpenText's scored CVEs is 6.3.
How many critical CVEs has OpenText published?: OpenText has published 33 critical-severity CVEs and 67 high-severity CVEs.
Are any of OpenText's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of OpenText's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in OpenText's CVEs?: OpenText's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-287 (Improper Authentication).
How does OpenText rank among CNAs?: By total CVE volume, OpenText ranks #102 of 370 CNAs, and it reports more complete CVE records than 47% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track OpenText CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing