← Back

CVE-2023-4964

nvd nist
Published: Oct 30, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers to redirect a user to malicious websites.

Affected (13)

Microfocus
2 products
Asset Management X
Service Management Automation X
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Microfocus
Asset Management X
Version 2021.08
Asset Management X
Version 2021.11
Asset Management X
Version 2022.05
Asset Management X
Version 2022.11
Microfocus
Service Management Automation X
Version 2020.05
Service Management Automation X
Version 2020.08
Service Management Automation X
Version 2020.11
Service Management Automation X
Version 2021.02
Service Management Automation X
Version 2021.05
Service Management Automation X
Version 2021.08
Service Management Automation X
Version 2021.11
Service Management Automation X
Version 2022.05
Service Management Automation X
Version 2022.11

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

Source: security@opentext.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.