๐Ÿ” CVE Alert

CVE-2026-76580

MEDIUM 5.4
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Cross-Site Scripting (XSS). This issue affects OpenText Directory Services (OTDS): from 25.1 through 26.2.

CWE CWE-79
Vendor opentext
Product opentext directory services (otds)
Published Nov 5, 2026
Last Updated Nov 5, 2026
Stay Ahead of the Next One

Get instant alerts for opentext opentext directory services (otds)

Be the first to know when new medium vulnerabilities affecting opentext opentext directory services (otds) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

OpenText / OpenText Directory Services (OTDS)
25.1 โ‰ค 26.2

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.opentext.com: https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0876890