Misinterpretation of Input Vulnerability Affects OpenText SMAX, AMX, and HCMX Products
CVE-2023-32260

6.5MEDIUM

Key Information:

Vendor

Opentext™

Status
Service Management Automation X (smax)
Asset Management X (amx)
Hybrid Cloud Management X (hcmx)
Vendor
CVE Published:
19 March 2024

What is CVE-2023-32260?

An input manipulation vulnerability has been identified in OpenText's Service Management Automation X, Asset Management X, and Hybrid Cloud Management X products. This vulnerability could lead to unauthorized input data manipulation, potentially impacting the integrity and reliability of the affected systems. Various versions across these products from 2020 through 2023 are susceptible to this issue, necessitating timely actions to mitigate risks associated with data entry and system interactions.

Affected Version(s)

Asset Management X (AMX) 2021.08

Asset Management X (AMX) 2021.11

Asset Management X (AMX) 2022.05

References

https://portal.microfocus.com/s/article/KM000018804?langu...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.