CVE-2024-7650 - Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4

Back Back to CVE browser

MEDIUM

Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4

Published Jul 10, 2025

6.3

MEDIUM

CVSS 4.0

EPSS 0.29%

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Code Inclusion. The vulnerability could allow access to the system via script injection.This issue affects Directory Services: 23.4.

Affected products

Vendor OpenText™ Product Directory Services Default
unaffected
- Version
  23.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

OpenText™

Directory Services

unaffected

Version	Status	Constraints
23.4	affected	-

Remediation

Vendor solution

Support articles, alerts & useful tools - Remote code execution vulnerability discovered in OpenText™ Directory Services CE 23.4 https://support.opentext.com/csm

Weaknesses (1)

CWE-94

Code Injection