Clickjacking Vulnerability in OpenText Directory Services for Windows and Linux
CVE-2026-18159

5.3MEDIUM

Key Information:

Vendor

Opentext
Status
Opentext Directory Services (otds)
Vendor
CVE Published:
5 November 2026

What is CVE-2026-18159?

A security flaw in OpenText Directory Services (OTDS) impacts both Windows and Linux systems, allowing attackers to execute Clickjacking attacks. By leveraging this vulnerability, malicious actors can trick users into clicking on malicious links or buttons, potentially leading to unauthorized actions within the application. Users of versions 10.5 through 26.2 need to implement security measures to protect against this exploit and ensure the integrity of their systems.

Affected Version(s)

OpenText Directory Services (OTDS) Windows 10.5 <= 26.2

OpenText Directory Services (OTDS) Windows 26.2.5

OpenText Directory Services (OTDS) Windows 26.1.8

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.