CVE-2026-1658CWE-451
Content spoofing vulnerability discovered in OpenText™ Directory Services
Medium · published February 19, 2026
What it is
User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.
The vulnerability could be exploited by a bad actor to inject manipulated text into the OpenText application, potentially misleading users.
This issue affects Directory Services: from 20.4.1 through 25.2.
The record
Technical detail
- CVSS v4.0
- 5.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Clear
- EPSS
- 0.00272 · 18.5th percentile
- Weakness
- CWE-451 · User Interface (UI) Misrepresentation of Critical Information
- Published
- 2026-02-19T22:40Z
EPSS history
Timeline