Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-13671
PUBLISHED
More InfoOfficial Page
Assigner-OpenText
Assigner Org ID-f81092c5-7f14-476d-80dc-24857f90be84
View Known Exploited Vulnerability (KEV) details
Published At-19 Feb, 2026 | 22:36
Updated At-23 Feb, 2026 | 18:17
Rejected At-
▼CVE Numbering Authority (CNA)
Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.

Affected Products
Vendor
Open Text CorporationOpenText™
Product
Web Site Management Server
Default Status
unaffected
Versions
Affected
  • 16.7.0
  • 16.7.1
Problem Types
TypeCWE IDDescription
CWECWE-352CWE-352 Cross-Site Request Forgery (CSRF)
Type: CWE
CWE ID: CWE-352
Description: CWE-352 Cross-Site Request Forgery (CSRF)
Metrics
VersionBase scoreBase severityVector
4.05.9MEDIUM
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/R:U/V:D/RE:H/U:Red
Version: 4.0
Base score: 5.9
Base severity: MEDIUM
Vector:
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/R:U/V:D/RE:H/U:Red
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-62CAPEC-62 Cross Site Request Forgery
CAPEC ID: CAPEC-62
Description: CAPEC-62 Cross Site Request Forgery
Solutions

https://support.opentext.com/csm/en?id=ot_kb_unauthenticated&sysparm_article=KB0854846

Configurations

Workarounds

Exploits

Credits

finder
Mario Tesoro
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://support.opentext.com/csm/en?id=ot_kb_unauthenticated&sysparm_article=KB0854846
N/A
Hyperlink: https://support.opentext.com/csm/en?id=ot_kb_unauthenticated&sysparm_article=KB0854846
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found