CVE-2025-13478CWE-522

CVE-2025-13478

published March 27, 2026

CVSS
8.4
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2(v4.10.1).

The record
Technical detail
CVSS
8.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-03-27T18:16Z
References (2)
https://docs.microfocus.com/doc/2159/25.2/cvesecurityfix · [email protected]https://docs.microfocus.com/doc/2159/25.2/releasenotesidentitymanager4101patch01 · [email protected]
EPSS history
Timeline
  • 27 MAR 13:43Z
    Cache Misconfiguration Leading to Cross-User Data Exposure
    cvelistv5