Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.1

OpenText eDirectory 9.2.3.0000 data exposure risk due to improper input handling

CVE-2021-22503 · published 2 years ago
Summary

A security issue has been found in OpenText eDirectory 9.2.3.0000 that could allow attackers to access sensitive information. This could happen if an attacker sends malicious input to the software. We recommend updating to a fixed version to prevent this risk.

What to do
  • Update microfocus edirectory to version 9.2.3.0000 or later.
Affected software
VendorProductAffected versions
microfocus edirectory < 9.2.3.0000
cpe:2.3:a:microfocus:edirectory:*:*:*:*:*:*:*:*
Original advisory text
Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000.
Possible
Improper Neutralization of Input During Web Page Generation Vulnerability

in eDirectory has been discovered in
OpenText™ eDirectory 9.2.3.0000.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.1 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published12 Sep 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2021-22503 · NVD
Track software like this
Free during beta