CVE-2026-13202: CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') in OpenText Opentext Directory Services
A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2.
AI Analysis
Technical Summary
CVE-2026-13202 is a high severity vulnerability in OpenText Opentext Directory Services (up to version 22.2) that permits input data manipulation, categorized under CWE-79 (Cross-Site Scripting). The vulnerability allows an attacker to manipulate input data, potentially leading to security issues related to improper handling of user-supplied input. There is no vendor advisory or patch information provided, and no known active exploitation has been reported.
Potential Impact
The vulnerability allows attackers to manipulate input data, which can lead to cross-site scripting attacks or other injection-based issues. This may result in unauthorized actions or data exposure within the affected service. However, no known exploits are currently active in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing input validation and sanitization controls where possible to reduce risk.
CVE-2026-13202: CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') in OpenText Opentext Directory Services
Description
A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2.
CVSS v4.0
Score 7.3high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-13202 is a high severity vulnerability in OpenText Opentext Directory Services (up to version 22.2) that permits input data manipulation, categorized under CWE-79 (Cross-Site Scripting). The vulnerability allows an attacker to manipulate input data, potentially leading to security issues related to improper handling of user-supplied input. There is no vendor advisory or patch information provided, and no known active exploitation has been reported.
Potential Impact
The vulnerability allows attackers to manipulate input data, which can lead to cross-site scripting attacks or other injection-based issues. This may result in unauthorized actions or data exposure within the affected service. However, no known exploits are currently active in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing input validation and sanitization controls where possible to reduce risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gfrp-mp45-qcq3
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-13202"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a833345bf8831d5392a3c5c
Added to database: 08/17/2026, 16:13:57 UTC
Last enriched: 08/17/2026, 16:56:34 UTC
Last updated: 08/17/2026, 22:33:22 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.